{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,28]],"date-time":"2026-07-28T07:32:18Z","timestamp":1785223938697,"version":"3.55.0"},"reference-count":55,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2016,7,30]],"date-time":"2016-07-30T00:00:00Z","timestamp":1469836800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"name":"Qatar National Research Funds","award":["NPRP-09-079-1-013"],"award-info":[{"award-number":["NPRP-09-079-1-013"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Knowl Inf Syst"],"published-print":{"date-parts":[[2017,4]]},"DOI":"10.1007\/s10115-016-0974-4","type":"journal-article","created":{"date-parts":[[2016,7,29]],"date-time":"2016-07-29T22:11:49Z","timestamp":1469830309000},"page":"187-234","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Role updating in information systems using model checking"],"prefix":"10.1007","volume":"51","author":[{"given":"Jinwei","family":"Hu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8848-0760","authenticated-orcid":false,"given":"Khaled M.","family":"Khan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yun","family":"Bai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruixuan","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,7,30]]},"reference":[{"key":"974_CR1","doi-asserted-by":"crossref","unstructured":"Ahmed T, Tripathi AR (2003) Static verification of security requirements in role based CSCW systems. In: ACM symposium on access control models and technologies, pp 196\u2013203","DOI":"10.1145\/775412.775438"},{"key":"974_CR2","volume-title":"Knowledge representation, reasoning and declarative problem solving","author":"C Baral","year":"2010","unstructured":"Baral C (2010) Knowledge representation, reasoning and declarative problem solving. Cambridge University Press, Cambridge"},{"key":"974_CR3","doi-asserted-by":"crossref","unstructured":"Bauer L, Garriss S, Reiter MK (2008) Detecting and resolving policy misconfigurations in access-control systems. In: ACM symposium on access control models and technologies, pp 185\u2013194","DOI":"10.1145\/1377836.1377866"},{"key":"974_CR4","doi-asserted-by":"crossref","unstructured":"Cimatti A, Clarke E, Giunchiglia E, Giunchiglia F, Pistore M, Roveri M, Sebastiani R, Tacchella A (2002) NuSMV Version 2: an opensource tool for symbolic model checking. In: Proceedings of the international conference on computer-aided verification (CAV 2002), LNCS, pp 359\u2013364","DOI":"10.1007\/3-540-45657-0_29"},{"key":"974_CR5","volume-title":"Model checking","author":"EM Clarke","year":"1999","unstructured":"Clarke EM, Grumberg O, Peled DA (1999) Model checking. MIT Press, Cambridge"},{"key":"974_CR6","doi-asserted-by":"crossref","unstructured":"Colantonio A, Di Pietro R, Ocello A, and Verde NV (2010) Evaluating the risk of adopting RBAC roles. In: Proceedings of the 24th annual IFIP WG 11.3 working conference on data and applications security, DBSec\u00a0\u201910, pp 303\u2013310","DOI":"10.1007\/978-3-642-13739-6_21"},{"key":"974_CR7","doi-asserted-by":"crossref","unstructured":"Colantonio A, Pietro RD, Ocello A, and Verde NV (2009) A formal framework to elicit roles with business meaning in RBAC systems. In: ACM symposium on access control models and technologies, pp 85\u201394","DOI":"10.1145\/1542207.1542223"},{"key":"974_CR8","doi-asserted-by":"crossref","unstructured":"Coyne EJ (1995) Role engineering. In: ACM workshop on role-based access, control 4","DOI":"10.1145\/270152.270159"},{"key":"974_CR9","doi-asserted-by":"crossref","unstructured":"Crampton J (2005) Understanding and developing role-based administrative models. In: ACM conference on computer and communications security, pp 158\u2013167","DOI":"10.1145\/1102120.1102143"},{"key":"974_CR10","unstructured":"Das T, Bhagwan R, Naldurg P (2010) Baaz: a system for detecting access control misconfigurations. In: USENIX Security 2010"},{"key":"974_CR11","doi-asserted-by":"crossref","unstructured":"Ene A, Horne WG, Milosavljevic N, Rao P, Schreiber R, Tarjan RE (2008) Fast exact and heuristic methods for role minimization problems. In: ACM symposium on access control models and technologies, pp 1\u201310","DOI":"10.1145\/1377836.1377838"},{"key":"974_CR12","doi-asserted-by":"crossref","unstructured":"Epstein P, Sandhu R (2001) Engineering of role\/permission assignments. In: Proceedings of the 17th annual computer security applications conference, pp 127\u2013136","DOI":"10.1109\/ACSAC.2001.991529"},{"issue":"3","key":"974_CR13","doi-asserted-by":"crossref","first-page":"224","DOI":"10.1145\/501978.501980","volume":"4","author":"DF Ferraiolo","year":"2001","unstructured":"Ferraiolo DF, Sandhu RS, Gavrila SI, Kuhn DR, Chandramouli R (2001) Proposed NIST standard for role-based access control. ACM Trans Inf Syst Secur 4(3):224\u2013274","journal-title":"ACM Trans Inf Syst Secur"},{"key":"974_CR14","unstructured":"Fisler K, Krishnamurthi S, Meyerovich L, Tschantz M (2005) Verification and change impact analysis of access-control policies. In: International conference on software engineering, pp 196\u2013205"},{"key":"974_CR15","volume-title":"Computers and intractability: a guide to the theory of NP-completeness","author":"MR Garey","year":"1979","unstructured":"Garey MR, Johnson DJ (1979) Computers and intractability: a guide to the theory of NP-completeness. W.H. Freeman and Company, New York"},{"key":"974_CR16","doi-asserted-by":"crossref","unstructured":"Hu J, Khan K, Bai Y, Zhang Y (2012) Constraint-enhanced role engineering via answer set programming. In: ACM ASIACCS, pp 73\u201374","DOI":"10.1145\/2414456.2414499"},{"key":"974_CR17","doi-asserted-by":"crossref","unstructured":"Hu J, Khan K, Bai Y, Zhang Y (2012) Compliance checking for usage-constrained credentials in trust negotiation systems. In: ISC 2012 LNCS 7483, pp 290\u2013305","DOI":"10.1007\/978-3-642-33383-5_18"},{"key":"974_CR18","doi-asserted-by":"crossref","unstructured":"Irwin K, Yu T, Winsborough WH (2008) Enforcing security properties in task-based systems. In: ACM symposium on access control models and technologies, pp 41\u201350","DOI":"10.1145\/1377836.1377843"},{"issue":"4","key":"974_CR19","doi-asserted-by":"crossref","first-page":"242","DOI":"10.1109\/TDSC.2007.70225","volume":"5","author":"S Jha","year":"2008","unstructured":"Jha S, Li N, Tripunitara M, Wang Q, Winsborough W (2008) Towards formal verification of role-based access control policies. IEEE Trans Dependable Secur Comput 5(4):242\u2013255","journal-title":"IEEE Trans Dependable Secur Comput"},{"key":"974_CR20","doi-asserted-by":"crossref","unstructured":"Karjoth G (2001) The authorization service of tivoli policy director. In: Annual computer security applications conference. IEEE Computer Society, Washington, DC, USA, p 319","DOI":"10.1109\/ACSAC.2001.991547"},{"key":"974_CR21","doi-asserted-by":"crossref","unstructured":"Kern A (2002) Advanced features for enterprise-wide role-based access control. In: Annual computer security applications conference. IEEE Computer Society, Washington, DC, USA, p 333","DOI":"10.1109\/CSAC.2002.1176305"},{"key":"974_CR22","doi-asserted-by":"crossref","unstructured":"Kern A, Kuhlmann M, Schaad A, Moffett JD (2002) Observations on the role life-cycle in the context of enterprise security management. In: ACM symposium on access control models and technologies, pp 43\u201351","DOI":"10.1145\/507711.507718"},{"key":"974_CR23","doi-asserted-by":"crossref","unstructured":"Kern A, Schaad A, Moffett JD (2003) An administration concept for the enterprise role-based access control model. In: ACM symposium on access control models and technologies, pp 3\u201311","DOI":"10.1145\/775412.775414"},{"key":"974_CR24","doi-asserted-by":"crossref","unstructured":"Li N, Bizri Z, Tripunitara MV (2004) On mutually-exclusive roles and separation of duty. In: ACM conference on computer and communications security, pp 42\u201351","DOI":"10.1145\/1030083.1030091"},{"key":"974_CR25","doi-asserted-by":"crossref","unstructured":"Li N, Mao Z (2007) Administration in role-based access control. In: ACM symposium on information, computer and communications security, pp 127\u2013138","DOI":"10.1145\/1229285.1229305"},{"issue":"3","key":"974_CR26","doi-asserted-by":"crossref","first-page":"474","DOI":"10.1145\/1066100.1066103","volume":"52","author":"N Li","year":"2005","unstructured":"Li N, Mitchell JC, Winsborough WH (2005) Beyond proof-of-compliance: security analysis in trust management. J ACM 52(3):474\u2013514","journal-title":"J ACM"},{"key":"974_CR27","doi-asserted-by":"crossref","unstructured":"Li N, Tripunitara MV (2004) Security analysis in role-based access control. In: ACM symposium on access control models and technologies, pp 126\u2013135","DOI":"10.1145\/990036.990058"},{"issue":"4","key":"974_CR28","doi-asserted-by":"crossref","first-page":"391","DOI":"10.1145\/1187441.1187442","volume":"9","author":"N Li","year":"2006","unstructured":"Li N, Tripunitara MV (2006) Security analysis in role-based access control. ACM Trans Inf Syst Secur 9(4):391\u2013420","journal-title":"ACM Trans Inf Syst Secur"},{"key":"974_CR29","doi-asserted-by":"crossref","unstructured":"Li N, Tripunitara MV, Wang Q (2006) Resiliency policies in access control. In: ACM conference on computer and communications security, pp 113\u2013123","DOI":"10.1145\/1180405.1180421"},{"key":"974_CR30","unstructured":"Ludwig F, Kunz M, Pernul G (2014) Role model optimization for secure role-based identity management. In: 22nd European conference on information systems, pp 113\u2013123"},{"key":"974_CR31","unstructured":"McPherson D. Role-based access control for multi-tier applications using authorization manager. http:\/\/technet.microsoft.com\/en-us\/library\/cc780256(WS.10).aspx"},{"key":"974_CR32","unstructured":"Kunz M, Fuchs L, Netter M, Pernul G (2015) Analyzing quality criteria in role-based identity and access management. In: 1st international conference on information systems security and privacy, Angers, France"},{"issue":"4","key":"974_CR33","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1145\/1880022.1880030","volume":"13","author":"I Molloy","year":"2010","unstructured":"Molloy I, Chen H, Li T, Wang Q, Li N, Bertino E, Calo S, Lobo J (2010) Mining roles with multiple objectives. ACM Trans Inf Syst Secur (TISSEC) 13(4):36","journal-title":"ACM Trans Inf Syst Secur (TISSEC)"},{"key":"974_CR34","doi-asserted-by":"crossref","unstructured":"Molloy I, Li N, Li T, Mao Z, Wang Q, Lobo J (2009) Evaluating role mining algorithms. In: ACM symposium on access control models and technologies, pp 95\u2013104","DOI":"10.1145\/1542207.1542224"},{"key":"974_CR35","doi-asserted-by":"crossref","unstructured":"Mondal S, Sural S, Atluri V (2009) Towards formal security analysis of GTRBAC using timed automata. In: ACM symposium on access control models and technologies, pp 33\u201342","DOI":"10.1145\/1542207.1542214"},{"key":"974_CR36","doi-asserted-by":"crossref","unstructured":"Ni Q, Lobo J, Calo SB, Rohatgi P, Bertino E (2009) Automating role-based provisioning by learning from examples. In: ACM symposium on access control models and technologies, pp 75\u201384","DOI":"10.1145\/1542207.1542222"},{"issue":"2","key":"974_CR37","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1145\/354876.354878","volume":"3","author":"SL Osborn","year":"2000","unstructured":"Osborn SL, Sandhu RS, Munawer Q (2000) Configuring role-based access control to enforce mandatory and discretionary access control policies. ACM Trans Inf Syst Secur 3(2):85\u2013106","journal-title":"ACM Trans Inf Syst Secur"},{"key":"974_CR38","doi-asserted-by":"crossref","unstructured":"Park JS, Costello KP, Neven TM, Diosomito JA (2004) A composite rbac approach for large, complex organizations. In: ACM symposium on access control models and technologies, pp 163\u2013172","DOI":"10.1145\/990036.990063"},{"issue":"6","key":"974_CR39","doi-asserted-by":"crossref","first-page":"844","DOI":"10.1109\/TKDE.2005.88","volume":"17","author":"I Ray","year":"2005","unstructured":"Ray I (2005) Applying semantic knowledge to real-time update of access control policies. IEEE Trans Knowl Data Eng 17(6):844\u2013858","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"974_CR40","doi-asserted-by":"crossref","unstructured":"Reith M, Niu J, Winsborough WH (2009) Toward practical analysis for trust management policy. In: ACM symposium on information, computer and communications security. ACM, pp 310\u2013321","DOI":"10.1145\/1533057.1533098"},{"key":"974_CR41","volume-title":"Discrete mathematics and its applications","author":"KH Rosen","year":"2003","unstructured":"Rosen KH (2003) Discrete mathematics and its applications, 5th edn. McGraw Hill, New York","edition":"5"},{"issue":"1","key":"974_CR42","doi-asserted-by":"crossref","first-page":"105","DOI":"10.1145\/300830.300839","volume":"2","author":"RS Sandhu","year":"1999","unstructured":"Sandhu RS, Bhamidipati V, Munawer Q (1999) The ARBAC97 model for role-based administration of roles. TISSEC 2(1):105\u2013135","journal-title":"TISSEC"},{"issue":"2","key":"974_CR43","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"RS Sandhu","year":"1996","unstructured":"Sandhu RS, Coyne EJ, Feinstein HL, Youman CE (1996) Role-based access control models. IEEE Comput 29(2):38\u201347","journal-title":"IEEE Comput"},{"key":"974_CR44","doi-asserted-by":"crossref","unstructured":"Schaad A, Lotz V, Sohr K (2006) A model-checking approach to analysing organisational controls in a loan origination process. In: ACM symposium on access control models and technologies, pp 139\u2013149","DOI":"10.1145\/1133058.1133079"},{"key":"974_CR45","doi-asserted-by":"crossref","unstructured":"Schaad A, Moffett JD, Jacob J (2001) The role-based access control system of a european bank: a case study and discussion. In: ACM symposium on access control models and technologies, pp 3\u20139","DOI":"10.1145\/373256.373257"},{"issue":"4","key":"974_CR46","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1109\/MSP.2010.139","volume":"8","author":"S Sinclair","year":"2010","unstructured":"Sinclair S, Smith SW (2010) What\u2019s wrong with access control in the real world? IEEE Secur Priv 8(4):70\u201373","journal-title":"IEEE Secur Priv"},{"issue":"7","key":"974_CR47","doi-asserted-by":"crossref","first-page":"924","DOI":"10.1109\/TKDE.2008.28","volume":"20","author":"K Sohr","year":"2008","unstructured":"Sohr K, Drouineaud M, Ahn G-J, Gogolla M (2008) Analyzing and managing role-based access control policies. Knowl Data Eng IEEE Trans 20(7):924\u2013939","journal-title":"Knowl Data Eng IEEE Trans"},{"key":"974_CR48","doi-asserted-by":"crossref","unstructured":"Stoller SD, Yang P, Ramakrishnan C, Gofman MI (2007) Efficient policy analysis for administrative role based access control. In: ACM conference on computer and communications security","DOI":"10.1145\/1315245.1315300"},{"key":"974_CR49","doi-asserted-by":"crossref","unstructured":"Vaidya J, Atluri V, Guo Q (2007) The role mining problem: finding a minimal descriptive set of roles. In: ACM symposium on access control models and technologies, pp 175\u2013184","DOI":"10.1145\/1266840.1266870"},{"key":"974_CR50","doi-asserted-by":"crossref","unstructured":"Vaidya J, Atluri V, Warner J (2006) Roleminer: mining roles using subset enumeration. In: ACM conference on computer and communications security, pp 144\u2013153","DOI":"10.1145\/1180405.1180424"},{"key":"974_CR51","doi-asserted-by":"crossref","first-page":"300","DOI":"10.1109\/TDSC.2008.61","volume":"7","author":"J Vaidya","year":"2010","unstructured":"Vaidya J, Atluri V, Warner J, Guo Q (2010) Role engineering via prioritized subset enumeration. IEEE Trans Dependable Secure Comput 7:300\u2013314","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"974_CR52","doi-asserted-by":"crossref","unstructured":"Wang H, Guo X, Fan Y, Bi J (2014) Extended access control and recommendation methods for enterprise knowledge management system. In: 2014 international conference on future information engineering, pp 224\u2013230","DOI":"10.1016\/j.ieri.2014.09.081"},{"key":"974_CR53","doi-asserted-by":"crossref","unstructured":"Xu W, Shehab M, Ahn GJ (2008) Visualization based policy analysis: case study in selinux. In: ACM symposium on access control models and technologies, pp 165\u2013174","DOI":"10.1145\/1377836.1377863"},{"key":"974_CR54","doi-asserted-by":"crossref","unstructured":"Zhang D, Ramamohanarao K, Ebringer T, Yann T (2008) Permission set mining: discovering practical and useful roles. In: Annual computer security applications conference, pp 247\u2013256","DOI":"10.1109\/ACSAC.2008.21"},{"key":"974_CR55","doi-asserted-by":"crossref","unstructured":"Xu Z, Stoller S (2013) Mining parameterized role-based policies. In: ACM CODASPY, pp 255\u2013266","DOI":"10.1145\/2435349.2435384"}],"container-title":["Knowledge and Information Systems"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-016-0974-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10115-016-0974-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-016-0974-4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10115-016-0974-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,11]],"date-time":"2019-09-11T19:42:18Z","timestamp":1568230938000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10115-016-0974-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7,30]]},"references-count":55,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2017,4]]}},"alternative-id":["974"],"URL":"https:\/\/doi.org\/10.1007\/s10115-016-0974-4","relation":{},"ISSN":["0219-1377","0219-3116"],"issn-type":[{"value":"0219-1377","type":"print"},{"value":"0219-3116","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,7,30]]}}}