{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T04:11:28Z","timestamp":1751602288039,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":101,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,7,8]]},"DOI":"10.1145\/3734436.3734453","type":"proceedings-article","created":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T17:32:44Z","timestamp":1751563964000},"page":"145-156","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Machine Learning in Access Control: A Taxonomy [Systematization of Knowledge Paper]"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2974-552X","authenticated-orcid":false,"given":"Mohammad Nur","family":"Nobi","sequence":"first","affiliation":[{"name":"Institute for Cyber Security (ICS), The University of Texas at San Antonio, San Antonio, TX, USA and FedEx Dataworks, Memphis, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9189-2478","authenticated-orcid":false,"given":"Maanak","family":"Gupta","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Tennessee Tech University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7402-553X","authenticated-orcid":false,"given":"Ram","family":"Krishnan","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6626-4189","authenticated-orcid":false,"given":"Md Shohel","family":"Rana","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Massachusetts Dartmouth, Dartmouth, MA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1298-8590","authenticated-orcid":false,"given":"Lopamudra","family":"Praharaj","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Tennessee Tech University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5627-5239","authenticated-orcid":false,"given":"Mahmoud","family":"Abdelsalam","sequence":"additional","affiliation":[{"name":"Department of Computer Science, North Carolina Agricultural and Technical State University, Greensboro, NC, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,7,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"IBM (2004). 2004. Course registration requirements. https:\/\/khanhn.files.wordpress.com\/2016\/08\/vidu-ibm.pdf Retrieved August 2021 from"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Ashraf Alkhresheh et al. 2020. Adaptive access control policies for IoT deployments. In IEEE IWCMC.","DOI":"10.1109\/IWCMC48107.2020.9148090"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"Manar Alohaly et al. 2018. A deep learning approach for extracting attributes of ABAC policies. In ACM SACMAT.","DOI":"10.1145\/3205977.3205984"},{"key":"e_1_3_2_1_4_1","volume-title":"IFIP International Conference on ICT Systems Security and Privacy Protection. Springer.","author":"Manar","unstructured":"Manar Alohaly et al. 2019a. Towards an Automated Extraction of ABAC Constraints from Natural Language Policies. In IFIP International Conference on ICT Systems Security and Privacy Protection. Springer."},{"key":"e_1_3_2_1_5_1","volume-title":"Automated extraction of attributes from natural language attribute-based access control (ABAC) policies. Cybersecurity","author":"Alohaly Manar","year":"2019","unstructured":"Manar Alohaly, Hassan Takabi, and Eduardo Blanco. 2019b. Automated extraction of attributes from natural language attribute-based access control (ABAC) policies. Cybersecurity (2019)."},{"key":"e_1_3_2_1_6_1","volume-title":"Information Technology for Management: Emerging Research and Applications","author":"Amaral C. AL","unstructured":"C. AL Amaral, Marcelo Fantinato, Hajo A Reijers, and Sarajane M Peres. 2018. Enhancing completion time prediction through attribute selection. In Information Technology for Management: Emerging Research and Applications. Springer."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Luciano Argento et al. 2018. Towards adaptive access control. In DBSec. Springer.","DOI":"10.1007\/978-3-319-95729-6_7"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Aljuaid Turkea Ayedh M et al. 2023. Enhanced adaptable and distributed access control decision making model based on machine learning for policy conflict resolution in BYOD environment. Applied Sciences (2023).","DOI":"10.3390\/app13127102"},{"key":"e_1_3_2_1_9_1","unstructured":"Vincent Ballet et al. 2019. Imperceptible adversarial attacks on tabular data. arXiv (2019)."},{"key":"e_1_3_2_1_10_1","volume-title":"ACM International Workshop on Attribute Based Access Control.","author":"Benkaouz Yahya","year":"2016","unstructured":"Yahya Benkaouz, Mohammed Erradi, and Bernd Freisleben. 2016. Work in progress: K-nearest neighbors techniques for abac policies clustering. In ACM International Workshop on Attribute Based Access Control."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"Rafae Bhatti et al. 2005. X-gtrbac admin: A decentralized administration model for enterprise-wide access control. ACM TISSEC (2005).","DOI":"10.1145\/990036.990049"},{"key":"e_1_3_2_1_12_1","unstructured":"Khalid Zaman Bijon et al. 2013a. Constraints specication in attribute based access control. Science (2013)."},{"key":"e_1_3_2_1_13_1","volume-title":"IEEE International Conference on Social Computing.","author":"Bijon Khalid Zaman","year":"2013","unstructured":"Khalid Zaman Bijon, Ram Krishnan, and Ravi Sandhu. 2013b. Towards an attribute based constraints specification language. In IEEE International Conference on Social Computing."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","unstructured":"Leo Breiman et al. 2017. Classification and regression trees. Routledge.","DOI":"10.1201\/9781315139470"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Thang Bui et al. 2019a. Efficient and extensible policy mining for relationship-based access control. In ACM SACMAT.","DOI":"10.1145\/3322431.3325106"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Thang Bui et al. 2019b. Greedy and evolutionary algorithms for mining relationship-based access control policies. Computers & Security (2019).","DOI":"10.1016\/j.cose.2018.09.011"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Thang Bui and Scott D Stoller. 2020a. A decision tree learning approach for mining relationship-based access control policies. In ACM SACMAT.","DOI":"10.1145\/3381991.3395619"},{"key":"e_1_3_2_1_18_1","volume-title":"Learning Attribute-Based and Relationship-Based Access Control Policies with Unknown Values. In International Conference on Information Systems Security. Springer.","author":"Bui Thang","year":"2020","unstructured":"Thang Bui and Scott D Stoller. 2020b. Learning Attribute-Based and Relationship-Based Access Control Policies with Unknown Values. In International Conference on Information Systems Security. Springer."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Thang Bui Scott D Stoller and Jiajie Li. 2017. Mining relationship-based access control policies. In ACM SACMAT.","DOI":"10.1145\/3078861.3078878"},{"key":"e_1_3_2_1_20_1","volume-title":"International Symposium on Foundations and Practice of Security. Springer.","author":"Bui Thang","year":"2018","unstructured":"Thang Bui, Scott D Stoller, and Jiajie Li. 2018. Mining relationship-based access control policies from incomplete and noisy data. In International Symposium on Foundations and Practice of Security. Springer."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","unstructured":"F. Cao et al. 2009. A new initialization method for categorical data clustering. Expert Systems with Applications.","DOI":"10.1016\/j.eswa.2009.01.060"},{"key":"e_1_3_2_1_22_1","volume-title":"IEEE International Conference on Big Data. IEEE.","author":"Cappelletti Luca","year":"2019","unstructured":"Luca Cappelletti, Stefano Valtolina, Giorgio Valentini, Marco Mesiti, and Elisa Bertino. 2019. On the quality of classification models for inferring ABAC policies from access logs. In IEEE International Conference on Big Data. IEEE."},{"key":"e_1_3_2_1_23_1","volume-title":"PRISM: An algorithm for inducing modular rules. International Journal of Man-Machine Studies","author":"Cendrowska Jadzia","year":"1987","unstructured":"Jadzia Cendrowska. 1987. PRISM: An algorithm for inducing modular rules. International Journal of Man-Machine Studies (1987)."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"Chih-Chung Chang et al. 2011. LIBSVM: a library for support vector machines. ACM TIST (2011).","DOI":"10.1145\/1961189.1961199"},{"key":"e_1_3_2_1_25_1","volume-title":"Chang","author":"Chin-Chen","year":"2006","unstructured":"Chin-Chen et al. Chang. 2006. An Access Control System with Time-constraint Using Support Vector Machines. Int. J. Netw. Secur. (2006)."},{"key":"e_1_3_2_1_26_1","unstructured":"Tianqi Chen et al. 2015. Xgboost: extreme gradient boosting. R package version 0.4--2 (2015)."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"crossref","unstructured":"Yuan Cheng Khalid Bijon and Ravi Sandhu. 2016. Extended ReBAC administrative models with cascading revocation and provenance support. In ACM SACMAT.","DOI":"10.1145\/2914642.2914655"},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of the 2024 ACM Workshop on SaT-CPS.","author":"Pankaj","unstructured":"Pankaj Chhetri et al. 2024. Environment Aware Deep Learning Based Access Control Model. In Proceedings of the 2024 ACM Workshop on SaT-CPS."},{"key":"e_1_3_2_1_29_1","volume-title":"The CN2 induction algorithm. Machine learning","author":"Clark Peter","year":"1989","unstructured":"Peter Clark and Tim Niblett. 1989. The CN2 induction algorithm. Machine learning (1989)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"Carlos Cotrini et al. 2018. Mining ABAC rules from sparse logs. In IEEE EuroS&P.","DOI":"10.1109\/EuroSP.2018.00011"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Christine M Cutillo et al. 2020. Machine intelligence in healthcare\u2014perspectives on trustworthiness explainability usability and transparency. NPJ digital medicine (2020).","DOI":"10.1038\/s41746-020-0254-2"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.17632\/7zbk8zsd8y.1"},{"key":"e_1_3_2_1_33_1","volume-title":"International Working Conference on Requirements Engineering: Foundation for Software Quality. Springer.","author":"Dalpiaz Fabiano","year":"2018","unstructured":"Fabiano Dalpiaz, Ivor Van der Schalk, and Garm Lucassen. 2018. Pinpointing ambiguity and incompleteness in requirements engineering via information visualization and NLP. In International Working Conference on Requirements Engineering: Foundation for Software Quality. Springer."},{"key":"e_1_3_2_1_34_1","volume-title":"Department of Computer Science, KU Leuven","author":"Decat Maarten","year":"2014","unstructured":"Maarten Decat, Jasper Bogaerts, Bert Lagaisse, and Wouter Joosen. 2014a. The e-document case study: functional analysis and access control requirements. CW Reports CW654, Department of Computer Science, KU Leuven (2014)."},{"key":"e_1_3_2_1_35_1","volume-title":"Dept. of Computer Science, KU Leuven","author":"Decat Maarten","year":"2014","unstructured":"Maarten Decat, Jasper Bogaerts, Bert Lagaisse, and Wouter Joosen. 2014b. The workforce management case study: functional analysis and access control requirements. CW Reports CW655, Dept. of Computer Science, KU Leuven (2014)."},{"key":"e_1_3_2_1_36_1","volume-title":"Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv.","author":"Jacob Devlin","year":"2018","unstructured":"Jacob Devlin et al. 2018. Bert: Pre-training of deep bidirectional transformers for language understanding. arXiv."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"crossref","unstructured":"Maryem Ait El Hadj et al. 2017. ABAC rule reduction via similarity computation. In ICNS. Springer.","DOI":"10.1007\/978-3-319-59647-1_7"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"crossref","unstructured":"Kathi Fisler et al. 2005. Verification and change-impact analysis of access-control policies. In ICSE.","DOI":"10.1145\/1062455.1062502"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Mario Frank et al. 2008. A class of probabilistic models for role engineering. In ACM CCS.","DOI":"10.1145\/1455770.1455809"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","unstructured":"Vanessa Frias-Martinez et al. 2009. A network access control mechanism based on behavior profiles. In IEEE ACSAC.","DOI":"10.1109\/ACSAC.2009.10"},{"key":"e_1_3_2_1_41_1","volume-title":"Greedy function approximation: a gradient boosting machine. Annals of statistics","author":"Friedman Jerome H","year":"2001","unstructured":"Jerome H Friedman. 2001. Greedy function approximation: a gradient boosting machine. Annals of statistics (2001)."},{"key":"e_1_3_2_1_42_1","volume-title":"Extremely randomized trees. Machine learning","author":"Geurts Pierre","year":"2006","unstructured":"Pierre Geurts, Damien Ernst, and Louis Wehenkel. 2006. Extremely randomized trees. Machine learning (2006)."},{"key":"e_1_3_2_1_43_1","unstructured":"Ian Goodfellow et al. 2017. The challenge of verification and testing of machine learning. Cleverhans-blog (2017)."},{"key":"e_1_3_2_1_44_1","volume-title":"PAMMELA: Policy Administration Methodology using Machine Learning. arXiv.","author":"Varun Gumma","year":"2021","unstructured":"Varun Gumma et al. 2021. PAMMELA: Policy Administration Methodology using Machine Learning. arXiv."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_46_1","volume-title":"DBSec","author":"Heaps John","unstructured":"John Heaps, Ram Krishnan, Yufei Huang, Jianwei Niu, and Ravi Sandhu. 2021. Access Control Policy Generation from User Stories Using Machine Learning. In DBSec. Springer."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"crossref","unstructured":"John Heaps Xiaoyin Wang Travis Breaux and Jianwei Niu. 2019. Toward Detection of Access Control Models from Source Code via Word Embedding. In ACM SACMAT.","DOI":"10.1145\/3322431.3326329"},{"key":"e_1_3_2_1_48_1","volume-title":"Long short-term memory. Neural computation","author":"Hochreiter Sepp","year":"1997","unstructured":"Sepp Hochreiter and J\u00fcrgen Schmidhuber. 1997. Long short-term memory. Neural computation (1997)."},{"key":"e_1_3_2_1_49_1","unstructured":"Vincent Hu. 2021. Machine Learning for Access Control Policy Verification. Technical Report. NIST."},{"key":"e_1_3_2_1_50_1","volume-title":"Access control policy verification. Computer","author":"Hu Vincent C","year":"2016","unstructured":"Vincent C Hu and Rick Kuhn. 2016. Access control policy verification. Computer (2016)."},{"key":"e_1_3_2_1_51_1","volume-title":"Bidirectional LSTM-CRF models for sequence tagging. arXiv","author":"Huang Zhiheng","year":"2015","unstructured":"Zhiheng Huang, Wei Xu, and Kai Yu. 2015. Bidirectional LSTM-CRF models for sequence tagging. arXiv (2015)."},{"key":"e_1_3_2_1_52_1","volume-title":"Data Mining: Practical machine learning tools and techniques.","author":"Witten Ian H","year":"2005","unstructured":"H Witten Ian and Frank Eibe. 2005. Data Mining: Practical machine learning tools and techniques."},{"key":"e_1_3_2_1_53_1","volume-title":"Shaibal Barua, and Shahina Begum.","author":"Islam Mir Riyanul","year":"2022","unstructured":"Mir Riyanul Islam, Mobyen Uddin Ahmed, Shaibal Barua, and Shahina Begum. 2022. A systematic review of explainable artificial intelligence in terms of different application domains and tasks. Applied Sciences (2022)."},{"key":"e_1_3_2_1_54_1","unstructured":"Padmavathi Iyer et al. 2020. Active learning of relationship-based access control policies. In ACM SACMAT."},{"key":"e_1_3_2_1_55_1","unstructured":"Padmavathi Iyer and Amirreza Masoumzadeh. 2019. Generalized mining of relationship-based access control policies in evolving systems. In ACM SACMAT."},{"key":"e_1_3_2_1_56_1","volume-title":"Polisma-a framework for learning attribute-based access control policies","author":"Jabal Amani Abu","unstructured":"Amani Abu Jabal, Elisa Bertino, Jorge Lobo, Mark Law, Alessandra Russo, Seraphin Calo, and Dinesh Verma. 2020. Polisma-a framework for learning attribute-based access control policies. In ESORICS. Springer."},{"key":"e_1_3_2_1_57_1","volume-title":"IEEE Conference on Collaboration and Internet Computing.","author":"Jha Sadhana","year":"2016","unstructured":"Sadhana Jha, Shamik Sural, Vijayalakshmi Atluri, and Jaideep Vaidya. 2016. An administrative model for collaborative management of ABAC systems and its security analysis. In IEEE Conference on Collaboration and Internet Computing."},{"key":"e_1_3_2_1_58_1","unstructured":"Kaggle. 2013. Amazon Employee Access Challenge. https:\/\/www.kaggle.com\/c\/amazon-employee-access-challenge\/"},{"key":"e_1_3_2_1_59_1","unstructured":"Leila Karimi et al. 2021a. Adaptive ABAC Policy Learning: A Reinforcement Learning Approach. arXiv (2021)."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"crossref","unstructured":"Leila Karimi et al. 2021b. An automatic attribute based access control policy extraction from access logs. IEEE TDSC.","DOI":"10.1109\/TDSC.2021.3054331"},{"key":"e_1_3_2_1_61_1","volume-title":"2018 IEEE International Conference on Big Data (Big Data). IEEE.","author":"Karimi Leila","year":"2018","unstructured":"Leila Karimi and James Joshi. 2018. An unsupervised learning based approach for mining attribute based access control policies. In 2018 IEEE International Conference on Big Data (Big Data). IEEE."},{"key":"e_1_3_2_1_62_1","volume-title":"APRIORI-SD: Adapting association rule learning to subgroup discovery. Applied Artificial Intelligence","author":"Kav\u0161ek Branko","year":"2006","unstructured":"Branko Kav\u0161ek and Nada Lavra?. 2006. APRIORI-SD: Adapting association rule learning to subgroup discovery. Applied Artificial Intelligence (2006)."},{"key":"e_1_3_2_1_63_1","volume-title":"Cloud Computing for Geospatial Big Data Analytics","author":"Khilar Pabitr Mohan","unstructured":"Pabitr Mohan Khilar, Vijay Chaudhari, and Rakesh Ranjan Swain. 2019. Trust-based access control in cloud computing using machine learning. In Cloud Computing for Geospatial Big Data Analytics. Springer."},{"key":"e_1_3_2_1_64_1","unstructured":"D Richard Kuhn et al. 2016. Pseudo-exhaustive testing of attribute based access control rules. In IEEE ICSTW."},{"key":"e_1_3_2_1_65_1","volume-title":"AAAI Conference on AI.","author":"Law Mark","year":"2020","unstructured":"Mark Law, Alessandra Russo, Elisa Bertino, Krysia Broda, and Jorge Lobo. 2020. Fastlas: scalable inductive logic programming incorporating domain-specific optimisation criteria. In AAAI Conference on AI."},{"key":"e_1_3_2_1_66_1","unstructured":"F. Leofante et al. 2018. Automated verification of neural networks: Advances challenges and perspectives. arXiv."},{"key":"e_1_3_2_1_67_1","volume-title":"Efficient Access Control Permission Decision Engine Based on Machine Learning. Security and Communication Networks","author":"Liu Aodi","year":"2021","unstructured":"Aodi Liu, Xuehui Du, and Na Wang. 2021. Efficient Access Control Permission Decision Engine Based on Machine Learning. Security and Communication Networks (2021)."},{"key":"e_1_3_2_1_68_1","volume-title":"International Journal of Information Security","author":"Llamas Javier Mart\u00ednez","year":"2025","unstructured":"Javier Mart\u00ednez Llamas, Davy Preuveneers, and Wouter Joosen. 2025. Certified unlearning for a trustworthy machine learning-based access control administration. International Journal of Information Security (2025)."},{"key":"e_1_3_2_1_69_1","volume-title":"Inferring access-control policy properties via machine learning","author":"Martin Evan","unstructured":"Evan Martin and Tao Xie. 2006. Inferring access-control policy properties via machine learning. In IEEE POLICY."},{"key":"e_1_3_2_1_70_1","unstructured":"Ninareh Mehrabi et al. 2019. A survey on bias and fairness in machine learning. arXiv (2019)."},{"key":"e_1_3_2_1_71_1","unstructured":"Andrew Meneely et al. 2012. Appendix B: iTrust electronic health care system case study. Software and Systems Traceability (2012)."},{"key":"e_1_3_2_1_72_1","unstructured":"Tomas Mikolov et al. 2013. Efficient estimation of word representations in vector space. arXiv (2013)."},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of the 18th International Multiconference, ser. Intelligent Systems.","author":"Mocanu Decebal","year":"2015","unstructured":"Decebal Mocanu, Fatih Turkmen, Antonio Liotta, et al. 2015. Towards ABAC policy mining from logs with deep learning. In Proceedings of the 18th International Multiconference, ser. Intelligent Systems."},{"key":"e_1_3_2_1_74_1","volume-title":"Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security.","author":"Molloy Ian","year":"2011","unstructured":"Ian Molloy, Jorge Lobo, and Suresh Chari. 2011. Adversaries' holy grail: access control analytics. In Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security."},{"key":"e_1_3_2_1_75_1","doi-asserted-by":"crossref","unstructured":"Masoud Narouei et al. 2017. Towards a top-down policy engineering framework for attribute-based access control. In ACM SACMAT.","DOI":"10.1145\/3078861.3078874"},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"crossref","unstructured":"Masoud Narouei and Hassan Takabi. 2015. Towards an automatic top-down role engineering approach using natural language processing techniques. In ACM SACMAT.","DOI":"10.1007\/978-3-319-24018-3_9"},{"key":"e_1_3_2_1_77_1","volume-title":"Markov chain sampling methods for Dirichlet process mixture models. Journal of computational and graphical statistics","author":"Neal Radford M","year":"2000","unstructured":"Radford M Neal. 2000. Markov chain sampling methods for Dirichlet process mixture models. Journal of computational and graphical statistics (2000)."},{"key":"e_1_3_2_1_78_1","doi-asserted-by":"crossref","unstructured":"Qun Ni et al. 2009. Automating role-based provisioning by learning from examples. In ACM SACMAT.","DOI":"10.1145\/1542207.1542222"},{"key":"e_1_3_2_1_79_1","unstructured":"Mohammad Nur Nobi et al. 2022a. Toward Deep Learning Based Access Control. In ACM CODASPY."},{"key":"e_1_3_2_1_80_1","volume-title":"Administration of Machine Learning Based Access Control","author":"Nobi Mohammad Nur","unstructured":"Mohammad Nur Nobi, Ram Krishnan, Yufei Huang, and Ravi Sandhu. 2022c. Administration of Machine Learning Based Access Control. In ESORICS. Springer."},{"key":"e_1_3_2_1_81_1","unstructured":"Mohammad Nur Nobi Ram Krishnan and Ravi Sandhu. 2022b. Adversarial Attacks in Machine Learning Based Access Control. In ITADATA. CEUR."},{"key":"e_1_3_2_1_82_1","volume-title":"Int. J. Adv. Comput. Sci. Appl","author":"Outchakoucht Aissam","year":"2017","unstructured":"Aissam Outchakoucht, ES Hamza, and Jean Philippe Leroy. 2017. Dynamic access control policy based on blockchain and machine learning for the internet of things. Int. J. Adv. Comput. Sci. Appl (2017)."},{"key":"e_1_3_2_1_83_1","unstructured":"Seth Proctor. 2005. Sun XACML Implementation. http:\/\/sunxacml.sourceforge.net\/"},{"key":"e_1_3_2_1_84_1","unstructured":"Ravi Sandhu et al. 1999. The ARBAC99 model for administration of roles. In IEEE ACSAC."},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"crossref","unstructured":"Daniel Servos et al. 2017. Current research and open problems in attribute-based access control. ACM CSUR (2017).","DOI":"10.1145\/3007204"},{"key":"e_1_3_2_1_86_1","unstructured":"Mahendra Pratap Singh et al. 2021. A Role-Based Administrative Model for Administration of Heterogeneous Access Control Policies and its Security Analysis. Information Systems Frontiers (2021)."},{"key":"e_1_3_2_1_87_1","unstructured":"John Slankas et al. 2013. Access control policy identification and extraction from project documentation. SCIENCE."},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664280"},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"crossref","unstructured":"Eduardo J Spinosa et al. 2009. Novelty detection with application to data streams. Intelligent Data Analysis (2009).","DOI":"10.3233\/IDA-2009-0373"},{"key":"e_1_3_2_1_90_1","doi-asserted-by":"crossref","unstructured":"Kriti Srivastava et al. 2020. Machine Learning Based Risk-Adaptive Access Control System to Identify Genuineness of the Requester. In Modern Approaches in Machine Learning and Cognitive Science: A Walkthrough. Springer.","DOI":"10.1007\/978-3-030-38445-6_10"},{"key":"e_1_3_2_1_91_1","volume-title":"DBSec","author":"Stoller Scott D","unstructured":"Scott D Stoller. 2015. An administrative model for relationship-based access control. In DBSec. Springer."},{"key":"e_1_3_2_1_92_1","volume-title":"A new scada dataset for intrusion detection research","author":"Turnipseed Ian P","unstructured":"Ian P Turnipseed. 2015. A new scada dataset for intrusion detection research. Mississippi State University."},{"key":"e_1_3_2_1_93_1","unstructured":"UCI. 2011. Amazon Access Data Set. http:\/\/archive.ics.uci.edu\/ml\/datasets\/AmazonAccessSamples"},{"key":"e_1_3_2_1_94_1","volume-title":"Wikipedia workload analysis for decentralized hosting. Computer Networks","author":"Urdaneta Guido","year":"2009","unstructured":"Guido Urdaneta, Guillaume Pierre, and Maarten Van Steen. 2009. Wikipedia workload analysis for decentralized hosting. Computer Networks (2009)."},{"key":"e_1_3_2_1_95_1","volume-title":"Cyberchair: A web-based groupware application to facilitate the paper reviewing process. arXiv","author":"De Stadt Richard Van","year":"2012","unstructured":"Richard Van De Stadt. 2012. Cyberchair: A web-based groupware application to facilitate the paper reviewing process. arXiv (2012)."},{"key":"e_1_3_2_1_96_1","doi-asserted-by":"crossref","unstructured":"Chengcheng Xiang et al. 2019. Towards Continuous Access Control Validation and Forensics. In ACM CCS.","DOI":"10.1145\/3319535.3363191"},{"key":"e_1_3_2_1_97_1","volume-title":"ACM Symposium on the Foundations of Software Engineering.","author":"Xiao Xusheng","year":"2012","unstructured":"Xusheng Xiao, Amit Paradkar, Suresh Thummalapenta, and Tao Xie. 2012. Automated extraction of security policies from natural-language software documents. In ACM Symposium on the Foundations of Software Engineering."},{"key":"e_1_3_2_1_98_1","volume-title":"DBSec","author":"Xu Zhongyuan","unstructured":"Zhongyuan Xu and Scott D Stoller. 2014. Mining attribute-based access control policies from logs. In DBSec. Springer."},{"key":"e_1_3_2_1_99_1","volume-title":"Mobility Patterns, Big Data and Transport Analytics","author":"Xyntarakis Michalis","unstructured":"Michalis Xyntarakis and Constantinos Antoniou. 2019. Data science and data visualization. In Mobility Patterns, Big Data and Transport Analytics. Elsevier."},{"key":"e_1_3_2_1_100_1","volume-title":"AAAI Conference on AI.","author":"Zheng Tianhang","year":"2019","unstructured":"Tianhang Zheng, Changyou Chen, and Kui Ren. 2019. Distributionally adversarial attack. In AAAI Conference on AI."},{"key":"e_1_3_2_1_101_1","doi-asserted-by":"crossref","unstructured":"Lu Zhou Chunhua Su and Li et al. 2019. Automatic fine-grained access control in SCADA by machine learning. Future Generation Computer Systems (2019).","DOI":"10.1016\/j.future.2018.04.043"}],"event":{"name":"SACMAT '25:SACMAT '25","location":"Stony Brook NY USA","sponsor":["sigsac ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 30th ACM Symposium on Access Control Models and Technologies"],"original-title":[],"deposited":{"date-parts":[[2025,7,3]],"date-time":"2025-07-03T17:34:45Z","timestamp":1751564085000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3734436.3734453"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,7]]},"references-count":101,"alternative-id":["10.1145\/3734436.3734453","10.1145\/3734436"],"URL":"https:\/\/doi.org\/10.1145\/3734436.3734453","relation":{},"subject":[],"published":{"date-parts":[[2025,7,7]]},"assertion":[{"value":"2025-07-07","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}