Quotation Prescher, Johannes, Schefer-Wenzl, Sigrid, Baumgraß, Anne, Strembeck, Mark, Mendling, Jan. 2014. Towards a Comprehensive Complexity Assessment of RBAC Models. EMISA FORUM 34 (2): 12-23.




In the context of process-aware information systems, process-related RBAC models define which tasks of a business process can be performed by which subjects. Entailment constraints on tasks, such as mutual exclusion or binding constraints, are defined in such models to enforce or restrict subjects and roles to execute a particular combination of tasks. Although these constraints are an important means to assist the specification of business processes and to control the execution of workflows, they require additional checks and can make an RBAC model more difficult to understand. This paper investigates the factors that contribute to the reasoning effort required to understand a process-related RBAC model. We present a set of measures for such RBAC models. Moreover, these measures are applied to a set of different RBAC models to indicate the measures' suitability for assessing the complexity of RBAC models.


Press 'enter' for creating the tag

Publication's profile

Status of publication Published
Affiliation WU
Type of publication Journal article
Language English
Title Towards a Comprehensive Complexity Assessment of RBAC Models
Volume 34
Number 2
Year 2014
Page from 12
Page to 23


Prescher, Johannes (Former researcher)
Schefer-Wenzl, Sigrid (Details)
Baumgraß, Anne (Former researcher)
Strembeck, Mark (Details)
Mendling, Jan (Details)
Institute for Data, Process and Knowledge Management (AE Sabou) (Details)
Institute for Information Systems and New Media IN (Details)
Research areas (ÖSTAT Classification 'Statistik Austria')
1100 Mathematics, information technology (Details)
1108 Informatics (Details)
1126 Computer networks (Details)
1146 Management information systems (Details)
5306 Business data processing (Details)
5367 Management information systems (Details)
Google Scholar: Search