Prescher, Johannes, Schefer-Wenzl, Sigrid, Baumgraß, Anne, Strembeck, Mark, Mendling, Jan. 2014. Towards a Comprehensive Complexity Assessment of RBAC Models. EMISA FORUM 34 (2): 12-23.
BibTeX
Abstract
In the context of process-aware information systems, process-related RBAC models define which tasks of a business process can be performed by which subjects. Entailment constraints on tasks, such as mutual exclusion or binding constraints, are defined in such models to enforce or restrict subjects and roles to execute a particular combination of tasks. Although these constraints are an important means to assist the specification of business processes and to control the execution of workflows, they require additional checks and can make an RBAC model more difficult to understand. This paper investigates the factors that contribute to the reasoning effort required to understand a process-related RBAC model. We present a set of measures for such RBAC models. Moreover, these measures are applied to a set of different RBAC models to indicate the measures' suitability for assessing the complexity of RBAC models.
Tags
Press 'enter' for creating the tagPublication's profile
| Status of publication | Published |
|---|---|
| Affiliation | WU |
| Type of publication | Journal article |
| Journal | EMISA FORUM |
| Language | English |
| Title | Towards a Comprehensive Complexity Assessment of RBAC Models |
| Volume | 34 |
| Number | 2 |
| Year | 2014 |
| Page from | 12 |
| Page to | 23 |
Associations
- People
- Prescher, Johannes (Former researcher)
- Schefer-Wenzl, Sigrid (Details)
- Baumgraß, Anne (Former researcher)
- Strembeck, Mark (Details)
- Mendling, Jan (Former researcher)
- Organization
- Institute for Data, Process and Knowledge Management (AE Mendling) (Details)
- Institute for Information Systems and New Media IN (Details)
- Research areas (ÖSTAT Classification 'Statistik Austria')
- 1100 Mathematics, information technology (Details)
- 1108 Informatics (Details)
- 1126 Computer networks (Details)
- 1146 Management information systems (Details)
- 5306 Business data processing (Details)
- 5367 Management information systems (Details)