Loading...

Enhancing role-based access control model through fuzzy relations

Takabi, H ; Sharif University of Technology | 2007

474 Viewed
  1. Type of Document: Article
  2. DOI: 10.1109/IAS.2007.69
  3. Publisher: 2007
  4. Abstract:
  5. Role-Based Access Control (RBAC) model is naturally suitable to organizations where users are assigned organizational roles with well-defined privileges. However, due to the large number of users in nowadays online services of organizations and enterprises, assigning users to roles is a tiresome task and maintaining user-role assignment up- to-date is costly and error-prone. Additionally, with the increasing number of users, RBAC may have problems in prohibiting cheat and changing roles of users. In order to categorize information and formulate security policies, human decision making is required which is naturally fuzzy in the real world. This leads using a fuzzy approach to address the issue in order to provide a more practical solution. In this paper, applicability of fuzzy set theory to RBAC has been investigated by identifying access control building blocks which are fuzzy in essence. An existing RBAC model is extended to allow imprecise access control policies, using the concept of trustworthiness which is fuzzy in nature. We call the extended model as Fuzzy RBAC. Applicability of the extended model has been evaluated through some case studies. © 2007 IEEE
  6. Keywords:
  7. Decision making ; Fuzzy control ; Fuzzy logic ; Fuzzy sets ; Internet ; Military data processing ; Problem solving ; Security systems ; Set theory ; Access control policies ; Building blocks ; Error prone ; Extended model ; Fuzzy approach ; Fuzzy relations ; Fuzzy set theory (FST) ; Human decision-making ; In order ; Information Assurance and Security (IAS) ; On-line services ; Practical solutions ; Real world ; Role assignment ; Role-based access control (RBAC) models ; Security policies ; Access control
  8. Source: 3rd Internationl Symposium on Information Assurance and Security, IAS 2007, Manchester, 20 August 2007 through 31 August 2007 ; September , 2007 , Pages 131-136 ; 0769528767 (ISBN); 9780769528762 (ISBN)
  9. URL: https://ieeexplore.ieee.org/document/4299763