{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T15:14:01Z","timestamp":1784387641002,"version":"3.55.0"},"reference-count":36,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2025,1,27]],"date-time":"2025-01-27T00:00:00Z","timestamp":1737936000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,1,27]],"date-time":"2025-01-27T00:00:00Z","timestamp":1737936000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100013148","name":"Science and Technology Foundation of State Grid Corporation of China","doi-asserted-by":"publisher","award":["5108-202218280A-2-232-XG"],"award-info":[{"award-number":["5108-202218280A-2-232-XG"]}],"id":[{"id":"10.13039\/501100013148","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecurity"],"abstract":"<jats:title>Abstract<\/jats:title>\n          <jats:p>The Industrial Internet motivates the research and development of Zero-Trust Architecture (ZTA). Role-Based Access Control (RBAC) as one of the key technologies for ZTA has become a hot topic. Role mining algorithms are crucial for RBAC and interpretable role mining receives wide attention due to its virtue of mining meaningful roles. However, the roles generated by existing algorithms have low interpretability and high time complexity, limiting their application in practice. This paper proposes an Interpretable Role Mining Algorithm Based on Overlapping Clustering (IRMAOC). It evaluates the interpretability of a role based on user similarity calculated on the permission and attribute of the role, and employs policy interpretability as the metric of a role set. IRMAOC creates a user association graph and clusters to generate candidate roles based on the graph. Then it remains the roles whose interpretability is higher than the preset threshold and re-clusters the users belonging to the other roles until the interpretability of all roles are higher than the threshold. Experimental results show that our algorithm significantly improves the interpretability of roles, reduces the Weighted Structure Complexity (WSC), and decreases time complexity compared to previous works.<\/jats:p>","DOI":"10.1186\/s42400-024-00348-z","type":"journal-article","created":{"date-parts":[[2025,1,27]],"date-time":"2025-01-27T13:30:28Z","timestamp":1737984628000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["IRMAOC: an interpretable role mining algorithm based on overlapping clustering"],"prefix":"10.1186","volume":"8","author":[{"given":"Yaqi","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1967-7743","authenticated-orcid":false,"given":"Jun\u2019e","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tao","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lu","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guirong","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhuo","family":"Lv","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,1,27]]},"reference":[{"key":"348_CR1","doi-asserted-by":"crossref","unstructured":"Abolfathi M, Raghebi Z, Jafarian H, et al. (2020). An accurate and scalable role mining algorithm based on graph embedding and unsupervised feature learning. Paper presented at the 53rd Hawaii international conference on system sciences (HICSS), Guang Dong, China, 2020, pp 1976\u20131985.","DOI":"10.24251\/HICSS.2020.242"},{"key":"348_CR2","doi-asserted-by":"crossref","unstructured":"Abolfathi M, Raghebi Z, Jafarian JH (2020) An accurate and scalable role mining algorithm based on graph embedding and unsupervised feature learning. Paper presented at the 53rd Hawaii international conference on system sciences, 2020.","DOI":"10.24251\/HICSS.2020.242"},{"issue":"5","key":"348_CR3","doi-asserted-by":"publisher","first-page":"669","DOI":"10.3390\/sym11050669","volume":"11","author":"MU Aftab","year":"2019","unstructured":"Aftab MU, Qin Z, Hundera NW et al (2019) Permission-based separation of duty in dynamic role-based access control model. Symmetry 11(5):669","journal-title":"Symmetry"},{"issue":"7307","key":"348_CR4","doi-asserted-by":"publisher","first-page":"761","DOI":"10.1038\/nature09182","volume":"466","author":"YY Ahn","year":"2010","unstructured":"Ahn YY, Bagrow JP, Lehmann S (2010) Link communities reveal multiscale complexity in networks. Nature 466(7307):761\u2013764","journal-title":"Nature"},{"key":"348_CR5","doi-asserted-by":"crossref","unstructured":"Anderer, S, Kempter T, Scheuermann B et al. (2021) The dynamic role mining problem: role mining in dynamically changing business Environments. Paper presented at the 13th international conference on evolutionary computation theory and applications (IJCCI), 2021, pp 37\u201348.","DOI":"10.5220\/0010654000003063"},{"key":"348_CR6","doi-asserted-by":"crossref","unstructured":"Anderer S, Scheuermann B, Mostaghim S, et al. (2021) RMPlib: a library of benchmarks for the role mining problem. Paper presented at the 26th ACM symposium on access control models and technologies (SACMAT), New York, NY, USA, 2021, pp 3-13.","DOI":"10.1145\/3450569.3463566"},{"key":"348_CR7","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1155\/2019\/8085303","volume":"2019","author":"W Bai","year":"2019","unstructured":"Bai W, Pan S, Chen Z et al (2019) RMMDI: a novel framework for role mining based on the multi-domain information. Secur Commun Netw 2019:15","journal-title":"Secur Commun Netw"},{"issue":"6","key":"348_CR8","doi-asserted-by":"publisher","first-page":"1386","DOI":"10.1093\/comjnl\/bxaa186","volume":"65","author":"C Blundo","year":"2021","unstructured":"Blundo C, Cimato S, Siniscalchi L (2021) Role mining heuristics for permission-role-usage cardinality constraints. Comput J 65(6):1386\u20131411","journal-title":"Comput J"},{"issue":"6","key":"348_CR9","doi-asserted-by":"publisher","first-page":"1386","DOI":"10.1093\/comjnl\/bxaa186","volume":"65","author":"C Blundo","year":"2022","unstructured":"Blundo C, Cimato S, Siniscalchi L (2022) Role mining heuristics for permission-role-usage cardinality constraints. Comput J 65(6):1386\u20131411","journal-title":"Comput J"},{"key":"348_CR10","doi-asserted-by":"crossref","unstructured":"Colantonio A, Pietro RD, Ocello A, et al. (2009) A formal framework to elicit roles with business meaning in RBAC systems. Paper presented at the14th ACM symposium on access control models and technologies (SACMAT), New York, NY, USA, 2010, pp 85-94.","DOI":"10.1145\/1542207.1542223"},{"key":"348_CR11","doi-asserted-by":"crossref","unstructured":"Crampton J, Eiben E, Gutin G, et al. (2022) Generalized noise role mining. Paper presented at the 27th ACM on symposium on access control models and technologies, New York, NY, USA, 2021, pp 91\u2013102.","DOI":"10.1145\/3532105.3535024"},{"key":"348_CR12","doi-asserted-by":"crossref","unstructured":"Du X, Chang X (2014) Performance of AI algorithms for mining meaningful roles. Paper presented at 2014 IEEE congress on evolutionary computation (CEC), Beijing, China, 2014, pp 2070-2076.","DOI":"10.1109\/CEC.2014.6900321"},{"key":"348_CR13","doi-asserted-by":"crossref","unstructured":"Ene A, Horne W, Milosavljevic N, et al. (2008) Fast exact and heuristic methods for role minimization problems. Paper presented at the 8th ACM symposium on access control models and technologies (SACMAT), New York, NY, USA, 2008, pp 1-10.","DOI":"10.1145\/1377836.1377838"},{"key":"348_CR14","doi-asserted-by":"crossref","unstructured":"Epstein P, Sandhu R (1999) Towards a UML based approach to role engineering. Paper presented at the 4th ACM Workshop on Role-based Access Control, New York, NY, USA, 1999, pp 135-143","DOI":"10.1145\/319171.319184"},{"key":"348_CR15","doi-asserted-by":"publisher","first-page":"12253","DOI":"10.1109\/ACCESS.2020.2965333","volume":"8","author":"R Ghazal","year":"2020","unstructured":"Ghazal R, Malik AK, Qadeer N et al (2020) Intelligent role-based access control model and framework using semantic business roles in multi-domain environments. IEEE Access 8:12253\u201312267","journal-title":"IEEE Access"},{"issue":"13","key":"348_CR16","doi-asserted-by":"publisher","first-page":"4253","DOI":"10.3390\/s21134253","volume":"21","author":"R Ghazal","year":"2021","unstructured":"Ghazal R, Malik AK, Raza B et al (2021) Agent-based semantic role mining for intelligent access control in multi-domain collaborative applications of smart cities. Sensors 21(13):4253","journal-title":"Sensors"},{"key":"348_CR17","first-page":"2011","volume":"12","author":"S Gregory","year":"2009","unstructured":"Gregory S (2009) Finding overlapping communities in networks by label propagation. New J Phys 12:2011\u20132024","journal-title":"New J Phys"},{"key":"348_CR18","doi-asserted-by":"crossref","unstructured":"Ivanov P, Chernyshov Y (2022) About ML approach for role mining problem solving. Paper presented at the Ural-Siberian conference on biomedical engineering, Radio electronics and information technology (USBEREIT), 2022, pp 244\u2013247.","DOI":"10.1109\/USBEREIT56278.2022.9923367"},{"key":"348_CR19","doi-asserted-by":"crossref","unstructured":"Jiang J, Yuan X, Mao R (2018) Research on role mining algorithms in RBAC. Paper presented at the 2nd high performance computing and cluster technologies conference, New York, NY, USA, June 2018, pp 1\u20135.","DOI":"10.1145\/3234664.3234680"},{"key":"348_CR20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103100","volume":"127","author":"H Kang","year":"2023","unstructured":"Kang H et al (2023) An improved minimal noise role mining algorithm based on role interpretability. Comput Secur 127:103100","journal-title":"Comput Secur"},{"key":"348_CR21","doi-asserted-by":"crossref","unstructured":"Kim TY, Cho SB (2019) CNN-LSTM neural networks for anomalous database intrusion detection in RBAC-administered model. Paper presented at neural information processing: 26th International conference the in international conference, Sydney, NSW, Australia, 12\u201315 December 2019, pp 131\u2013139.","DOI":"10.1007\/978-3-030-36808-1_15"},{"issue":"3","key":"348_CR22","doi-asserted-by":"publisher","DOI":"10.1088\/1367-2630\/11\/3\/033015","volume":"11","author":"A Lancichinetti","year":"2009","unstructured":"Lancichinetti A, Fortunato S, Kert\u00e9sz J (2009) Detecting the overlapping and hierarchical community structure in complex networks. New J Phys 11(3):033015","journal-title":"New J Phys"},{"issue":"6","key":"348_CR23","doi-asserted-by":"publisher","first-page":"5301","DOI":"10.1109\/TVT.2016.2616034","volume":"66","author":"Y Liu","year":"2017","unstructured":"Liu Y, Wu H, Xia Y et al (2017) Optimal online data dissemination for resource constrained mobile opportunistic networks. IEEE Trans Veh Technol 66(6):5301\u20135315","journal-title":"IEEE Trans Veh Technol"},{"key":"348_CR24","doi-asserted-by":"crossref","unstructured":"Ma X, Li R, Lu Z (2010) Role mining based on weights. Paper presented at the 15th ACM symposium on access control models and technologies (SACMAT), New York, NY, USA, 2010, pp 65-74.","DOI":"10.1145\/1809842.1809854"},{"issue":"4","key":"348_CR25","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2871148","volume":"48","author":"B Mitra","year":"2016","unstructured":"Mitra B, Sural S, Vaidya J et al (2016) A survey of role mining. ACM Comput Surv 48(4):1\u201337","journal-title":"ACM Comput Surv"},{"key":"348_CR26","doi-asserted-by":"crossref","unstructured":"Molloy I, Chen H, Li T, et al. (2010) Mining roles with multiple objectives. Paper presented at the ACM transactions on information and system security (TISSEC), New York, NY, USA, 2010, 13(4): 1\u201335.","DOI":"10.1145\/1880022.1880030"},{"issue":"6","key":"348_CR27","first-page":"2023","volume":"14","author":"A Nazirah","year":"2023","unstructured":"Nazirah A, Siti R, Rabiah A et al (2023) Hamming distance approach to reduce role mining scalability. Int. J. Adv. Comput. Sci. Appl. (IJACSA) 14(6):2023","journal-title":"Int. J. Adv. Comput. Sci. Appl. (IJACSA)"},{"issue":"11","key":"348_CR28","first-page":"7","volume":"22","author":"Z Shen","year":"2022","unstructured":"Shen Z, Fan L, Hua T et al (2022) Role mining scheme with abnormal permission configuration. Netinfo Secur 22(11):7\u201316","journal-title":"Netinfo Secur"},{"issue":"4","key":"348_CR29","first-page":"16","volume":"4","author":"A Simon","year":"2023","unstructured":"Simon A, Kempter T, Bernd S et al (2023) Dynamic optimization of role concepts for role-based access control using evolutionary algorithms. SN Comput. Sci. 4(4):16","journal-title":"SN Comput. Sci."},{"issue":"11","key":"348_CR30","doi-asserted-by":"publisher","first-page":"342","DOI":"10.3390\/info10110342","volume":"10","author":"W Sun","year":"2019","unstructured":"Sun W, Su H, Liu H (2019) Role-engineering optimization with cardinality constraints and user-oriented mutually exclusive constraints. Information 10(11):342","journal-title":"Information"},{"key":"348_CR31","doi-asserted-by":"publisher","first-page":"57143","DOI":"10.1109\/ACCESS.2022.3174679","volume":"10","author":"NF Syed","year":"2022","unstructured":"Syed NF, Shah SW, Shaghaghi A et al (2022) Zero trust architecture (ZTA): a comprehensive survey. IEEE Access 10:57143\u201357179","journal-title":"IEEE Access"},{"key":"348_CR32","doi-asserted-by":"crossref","unstructured":"Vaidya J, Atluri V, Warner J (2006) RoleMiner: mining roles using subset enumeration. Paper presented at the 13th ACM conference on Computer and communications security (CCS '06), New York, NY, USA, 2006, pp 144-153.","DOI":"10.1145\/1180405.1180424"},{"issue":"2","key":"348_CR33","first-page":"305","volume":"38","author":"J Wang","year":"2021","unstructured":"Wang J, Cui Y (2021) Role mining algorithm based on separation of duty. Comput Appl Softw 38(2):305\u2013310","journal-title":"Comput Appl Softw"},{"key":"348_CR34","doi-asserted-by":"crossref","unstructured":"Xu Z, Stoller SD (2012) Algorithms for mining meaningful roles. Paper presented at the 12th Symposium on Access Control Models and Technologies (SACMAT), New York, NY, USA, 2012, pp 57-66.","DOI":"10.1145\/2295136.2295146"},{"issue":"1","key":"348_CR35","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1007\/s13278-016-0318-0","volume":"6","author":"B Zhou","year":"2016","unstructured":"Zhou B (2016) Applying the clique percolation method to analyzing cross-market branch banking network structure: the case of Illinois. Soc Netw Anal Min 6(1):11","journal-title":"Soc Netw Anal Min"},{"issue":"12","key":"348_CR36","first-page":"117","volume":"45","author":"C Zhou","year":"2018","unstructured":"Zhou C, Ren Z, Wu W (2018) Sematic roles mining algorithms based on formal concept analysis. Comput Sci 45(12):117\u2013122","journal-title":"Comput Sci"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-024-00348-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s42400-024-00348-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-024-00348-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,1,27]],"date-time":"2025-01-27T13:30:50Z","timestamp":1737984650000},"score":1,"resource":{"primary":{"URL":"https:\/\/cybersecurity.springeropen.com\/articles\/10.1186\/s42400-024-00348-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,27]]},"references-count":36,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,12]]}},"alternative-id":["348"],"URL":"https:\/\/doi.org\/10.1186\/s42400-024-00348-z","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1,27]]},"assertion":[{"value":"10 June 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 December 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 January 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"54"}}