Quotation Baumgraß, Anne, Strembeck, Mark. Forthcoming. An Approach to Bridge the Gap between Role Mining and Role Engineering via Migration Guides. In Proc. of the 7th International Conference on Availability, Reliability and Security (ARES), Hrsg.


RIS


BibTeX

Abstract

Mining approaches, such as role mining or organizational mining, can be applied to derive permissions and roles from a system's configuration or from log files. In this way, mining techniques document the current state of a system and produce current-state RBAC models. However, such current-state RBAC models most often follow from structures that have evolved over time and are not the result of a systematic rights management procedure. In contrast, role engineering is applied to define a tailored RBAC model for a particular organization or information system. Thus, role engineering techniques produce a target-state RBAC model that is customized for the business processes supported via the respective information system. The migration from a current-state RBAC model to a tailored target-state RBAC model is, however, a complex task. In this paper, we present a systematic approach to migrate current-state RBAC models to target-state RBAC models. In particular, we use model comparison techniques to identify differences between two RBAC models. Based on these differences, we derive migration rules that define which elements and element relations must be changed, added, or removed. A migration guide then includes all migration rules that need to be applied to a particular current-state RBAC model to produce the corresponding target-state RBAC model. In addition, we discuss different options for tool support and describe our implementation for the derivation of migration guides which is based on the Eclipse Modeling Framework (EMF).

Tags

Press 'enter' for creating the tag

Publication's profile

Affiliation WU
Type of publication Contribution to conference proceedings
Language English
Title An Approach to Bridge the Gap between Role Mining and Role Engineering via Migration Guides
Title of whole publication Proc. of the 7th International Conference on Availability, Reliability and Security (ARES)
Year 2012

Associations

People
Baumgraß, Anne (Former researcher)
Strembeck, Mark (Details)
Organization
Information Systems and Operations DP (Details)
Information Systems and New Media IN (Details)
Research areas (ÖSTAT Classification 'Statistik Austria')
1100 Mathematics, information technology (Details)
1108 Informatics (Details)
1146 Management information systems (Details)
5367 Management information systems (Details)
Google Scholar: Search