{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T16:38:36Z","timestamp":1781109516272,"version":"3.54.1"},"reference-count":36,"publisher":"IGI Global Scientific Publishing","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012,10]]},"abstract":"<jats:p>The concept of role has revolutionized the access control systems by making them more efficient and by simplifying their management. Role mining is the discipline of automating the definition of roles in a given access control system. It is a vivid research area, which has attracted a growing interest in the last years. Research on role mining has produced several interesting contributions in this field, and has also raised several related issues toward leveraging them in actual enterprises. This paper is a comprehensive analysis of the main research directions around role mining and the future trends. The authors present the problem of role mining, the current achievements to solve it and the related open issues. With this objective, they define a complete and realistic business process for Role Mining, and the authors sequentially analyze the issues related to each step of the process by investigating the main contributions in the literature. They also point the unhandled issues and we highlight the future perspectives.<\/jats:p>","DOI":"10.4018\/jsse.2012100103","type":"journal-article","created":{"date-parts":[[2013,2,6]],"date-time":"2013-02-06T13:18:56Z","timestamp":1360156736000},"page":"45-64","source":"Crossref","is-referenced-by-count":15,"title":["Role Mining to Assist Authorization Governance"],"prefix":"10.4018","volume":"3","author":[{"given":"Safa\u00e0","family":"Hachana","sequence":"first","affiliation":[{"name":"Swid Web Performance Service, Rennes, France, & Laboratoire d\u2019Informatique Scientifique et Industrielle, \u00c9cole Nationale Sup\u00e9rieure de M\u00e9canique et d\u2019A\u00e9rotechnique, Poitiers, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nora","family":"Cuppens-Boulahia","sequence":"additional","affiliation":[{"name":"Department of Logics in Uses Social Science and Information, Institut-Mines T\u00e9l\u00e9com\/T\u00e9l\u00e9com Bretagne, Renne, France, & Swid Web Performance Service, Rennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fr\u00e9d\u00e9ric","family":"Cuppens","sequence":"additional","affiliation":[{"name":"Department of Logics in Uses Social Science and Information, Institut-Mines T\u00e9l\u00e9com\/T\u00e9l\u00e9com Bretagne, Rennes, France"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"jsse.2012100103-0","doi-asserted-by":"publisher","DOI":"10.1016\/S0166-218X(98)00039-0"},{"key":"jsse.2012100103-1","doi-asserted-by":"crossref","unstructured":"Ar\u00e9valo, G., Berry, A., Huchard, M., Perrot, G., & Sigayret, A. (2007). Performances of Galois sub-hierarchy-building algorithms. In Proceedings of the 5th International Conference on Formal Concept Analysis (pp. 166-180).","DOI":"10.1007\/978-3-540-70901-5_11"},{"key":"jsse.2012100103-2","unstructured":"Colantonio, A. (2011). Role mining techniques to improve RBAC administration (Unpublished doctoral dissertation) Universita Degli Studi Roma Tre, Facolt\u00e0 di Scienze Matematiche Fisiche e Naturali, XXIII Ciclo del Dottorato di Ricerca in Matematica, Roma, Italy."},{"key":"jsse.2012100103-3","doi-asserted-by":"crossref","unstructured":"Colantonio, A., Di Pietro, R., Ocello, A., & Verde, N. V. (2009). A formal framework to elicit roles with business meaning in RBAC systems. In Proceedings of the 14th ACM Symposium on Access Control Models and Technologies (pp.85-94). New York, NY: ACM.","DOI":"10.1145\/1542207.1542223"},{"key":"jsse.2012100103-4","doi-asserted-by":"crossref","unstructured":"Colantonio, A., Pietro, R. D., & Ocello, A. (2008). Leveraging lattices to improve role mining. In Proceedings of the 23rd International Information Security Conference (Vol. 278, pp. 333-347).","DOI":"10.1007\/978-0-387-09699-5_22"},{"key":"jsse.2012100103-5","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2010.08.022"},{"key":"jsse.2012100103-6","first-page":"20","article-title":"Visual role mining: A picture is worth a thousand roles.","volume":"24","author":"A.Colantonio","year":"2011","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"jsse.2012100103-7","article-title":"Gestion des identiti\u00e9s et des autorisations.","author":"N.Cuppens-Boulahia","journal-title":"MISC: Multisystem & Internet Security Cookbook"},{"key":"jsse.2012100103-8","doi-asserted-by":"crossref","unstructured":"Ene, A., Horne, W., Milosavljevic, N., Rao, P., Schreiber, R., & Tarjan, R. E. (2008). Fast exact and heuristic methods for role minimization problems. In Proceedings of the 13th ACM Symposium on Access Control Models and Technologies (pp. 1-10). New York, NY: ACM.","DOI":"10.1145\/1377836.1377838"},{"key":"jsse.2012100103-9","doi-asserted-by":"publisher","DOI":"10.1145\/501978.501980"},{"key":"jsse.2012100103-10","doi-asserted-by":"crossref","unstructured":"Frank, M., Basin, D., & Buhmann, J. M. (2008). A class of probabilistic models for role engineering. In Proceedings of the 15th ACM Conference on Computer and Communications Security (pp. 27-31). New York, NY: ACM.","DOI":"10.1145\/1455770.1455809"},{"key":"jsse.2012100103-11","doi-asserted-by":"crossref","unstructured":"Frank, M., Buhmann, J. M., & Basin, D. (2010). On the definition of role mining. In Proceedings of the 15th ACM Symposium on Access Control Models and Technologies (pp. 35-44). New York, NY: ACM.","DOI":"10.1145\/1809842.1809851"},{"key":"jsse.2012100103-12","doi-asserted-by":"crossref","unstructured":"Frank, M., Streich, A. P., Basin, D. A., & Buhmann, J. M. (2009). A probabilistic approach to hybrid role mining. In Proceedings of the 16th ACM Conference on Computer and Communications Security (pp. 101-111). New York, NY: ACM.","DOI":"10.1145\/1653662.1653675"},{"key":"jsse.2012100103-13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.08.002"},{"key":"jsse.2012100103-14","author":"M. P.Gallaher","year":"2002","journal-title":"The economic impact of role-based access control (Tech. Rep. No. RTI 07007.012)"},{"key":"jsse.2012100103-15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-59830-2"},{"key":"jsse.2012100103-16","doi-asserted-by":"crossref","unstructured":"Hachana, S., Cuppens, F., Cuppens-Boulahia, N., & Garcia-Alfaro, J. (2012, August). Towards automated assistance for mined roles analysis in role mining applications. In Proceedings of the 7th International Conference on Availability, Reliability and Security. Washington, DC: IEEE Computer Society.","DOI":"10.1109\/ARES.2012.61"},{"key":"jsse.2012100103-17","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.1980.1102314"},{"key":"jsse.2012100103-18","doi-asserted-by":"publisher","DOI":"10.1145\/1132973.1132976"},{"key":"jsse.2012100103-19","doi-asserted-by":"crossref","unstructured":"Kuhlmann, M., Shohat, D., & Schimpf, G. (2003). Role mining - Revealing business roles for security administration using data mining technology. In Proceedings of the 8th ACM Symposium on Access Control Models and Technologies (pp. 179-186). New York, NY: ACM.","DOI":"10.1145\/775412.775435"},{"key":"jsse.2012100103-20","doi-asserted-by":"crossref","unstructured":"Lu, H., Vaidya, J., & Atluri, V. (2008). Optimal Boolean matrix decomposition \u2013 application to role engineering. In Proceedings of the 24th International Conference on Data Engineering (pp. 297-306). Washington, DC: IEEE Computer Society.","DOI":"10.1109\/ICDE.2008.4497438"},{"key":"jsse.2012100103-21","doi-asserted-by":"crossref","unstructured":"Lu, H., Vaidya, J., Atluri, V., & Hong, Y. (2009). Extended Boolean matrix decomposition. In Proceedings of the 9th International Conference on Data Mining (pp. 317-326). Washington, DC: IEEE Computer Society.","DOI":"10.1109\/ICDM.2009.61"},{"key":"jsse.2012100103-22","doi-asserted-by":"crossref","unstructured":"Ma, X., Li, R., & Lu, Z. (2010). Role mining based on weights. In Proceedings of the 15th ACM Symposium on Access Control Models and Technologies (pp. 65-74). New York, NY: ACM.","DOI":"10.1145\/1809842.1809854"},{"key":"jsse.2012100103-23","doi-asserted-by":"crossref","unstructured":"Molloy, I., Chen, H., Li, T., Wang, Q., Li, N., & Bertino, E. \u2026Lobo, J. (2008). Mining roles with semantic meanings. In Proceedings of the 13th ACM Symposium on Access Control Models and Technologies (pp. 21-30). New York, NY: ACM.","DOI":"10.1145\/1377836.1377840"},{"key":"jsse.2012100103-24","doi-asserted-by":"publisher","DOI":"10.1145\/1880022.1880030"},{"key":"jsse.2012100103-25","doi-asserted-by":"crossref","unstructured":"Molloy, I., Li, N., Li, T., Mao, Z., Wang, Q., & Lobo, J. (2009). Evaluating role mining algorithms. In Proceedings of the 14th ACM Symposium on Access Control Models and Technologies (pp. 95-104). New York, NY: ACM.","DOI":"10.1145\/1542207.1542224"},{"key":"jsse.2012100103-26","doi-asserted-by":"crossref","unstructured":"Molloy, I., Li, N., Qi, Y. A., Lobo, J., & Dickens, L. (2010). Mining roles with noisy data. In Proceedings of the 15th ACM Symposium on Access Control Models and Technologies (pp. 45-54). New York, NY: ACM.","DOI":"10.1145\/1809842.1809852"},{"key":"jsse.2012100103-27","author":"R.Nikolaus","year":"2007","journal-title":"Learning the parts of objects using non-negative matrix factorization (NMF) (Tech. Rep.)"},{"key":"jsse.2012100103-28","doi-asserted-by":"publisher","DOI":"10.1109\/2.485845"},{"key":"jsse.2012100103-29","doi-asserted-by":"crossref","DOI":"10.21236\/ADA486804","author":"A. P.Singh","year":"2008","journal-title":"Relational learning via collective matrix factorization (Tech. Rep.)"},{"key":"jsse.2012100103-30","doi-asserted-by":"crossref","unstructured":"Streich, A. P., Frank, M., & Buhmann, J. M. (2009). Multi-assignment clustering for Boolean data. In Proceedings of the 26th Annual International Conference on Machine Learning (pp. 969-976). New York, NY: ACM.","DOI":"10.1145\/1553374.1553498"},{"key":"jsse.2012100103-31","doi-asserted-by":"publisher","DOI":"10.3166\/isi.13.4.107-131"},{"key":"jsse.2012100103-32","doi-asserted-by":"crossref","unstructured":"Vaidya, J., Atluri, V., & Guo, Q. (2007). The role mining problem: finding a minimal descriptive set of roles. In Proceedings of the 12th ACM Symposium on Access Control Models and Technologies (pp. 175-184). New York, NY: ACM.","DOI":"10.1145\/1266840.1266870"},{"key":"jsse.2012100103-33","doi-asserted-by":"crossref","unstructured":"Vaidya, J., Atluri, V., Guo, Q., & Adam, N. R. (2008). Migrating to optimal RBAC with minimal perturbation. In Proceedings of the 13th ACM Symposium on Access Control Models and Technologies (pp. 11-20). New York, NY: ACM.","DOI":"10.1145\/1377836.1377839"},{"key":"jsse.2012100103-34","doi-asserted-by":"crossref","unstructured":"Vaidya, J., Atluri, V., & Warner, J. (2006). Roleminer: Mining roles using subset enumeration. In Proceedings of the 13th ACM Conference on Computer and Communications Security (pp. 144-153). New York, NY: ACM.","DOI":"10.1145\/1180405.1180424"},{"key":"jsse.2012100103-35","unstructured":"Zhang, D., Ramamohanarao, K., & Ebringer, T. (2007). Role engineering using graph optimization. In Proceedings of the 12th ACM Symposium on Access Control Models and Technologies (pp. 139-144). New York, NY: ACM."}],"container-title":["International Journal of Secure Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=74844","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,9]],"date-time":"2019-07-09T06:23:33Z","timestamp":1562653413000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/jsse.2012100103"}},"subtitle":["How Far Have We Gone?"],"short-title":[],"issued":{"date-parts":[[2012,10]]},"references-count":36,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.4018\/jsse.2012100103","relation":{},"ISSN":["1947-3036","1947-3044"],"issn-type":[{"value":"1947-3036","type":"print"},{"value":"1947-3044","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012,10]]}}}