@article{dbfca9e7027d4069a572759653d3dc4e,
title = "Policy adaptation in hierarchical attribute-based access control systems",
abstract = "In Attribute-Based Access Control (ABAC), access to resources is given based on the attributes of subjects, objects, and environment. There is an imminent need for the development of efficient algorithms that enable migration to ABAC. However, existing policy mining approaches do not consider possible adaptation to the policy of a similar organization. In this article, we address the problem of automatically determining an optimal assignment of attribute values to subjects for enabling the desired accesses to be granted while minimizing the number of ABAC rules used by each subject or other appropriate metrics. We show the problem to be NP-Complete and propose a heuristic solution.",
keywords = "ABAC policy, Attribute value hierarchy, Policy adaptation",
author = "Saptarshi Das and Shamik Sural and Jaideep Vaidya and Vijayalakshmi Atluri",
note = "Funding Information: Research reported in this publication was supported by the National Institutes of Health under award R01GM118574, and by the National Science Foundation under awards CNS-1564034, CNS-1624503 and CNS-1747728. The content is solely the responsibility of the authors and does not necessarily represent the official views of the agencies funding the research. Authors{\textquoteright} addresses: S. Das and S. Sural, Dept. of Computer Science & Engineering, Indian Institute of Technology Kharag-pur, West Bengal, 721302, India; emails: saptarshidas13@iitkgp.ac.in, shamik@cse.iitkgp.ac.in; J. Vaidya and V. Atluri, MSIS Department, Rutgers University, 1 Washington Park Newark, NJ 07102-1803 USA; emails: jsvaidya@business.rutgers.edu, atluri@rutgers.edu. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from permissions@acm.org. {\textcopyright} 2019 Association for Computing Machinery. 1533-5399/2019/08-ART40 $15.00 https://doi.org/10.1145/3323233 Publisher Copyright: {\textcopyright} 2019 Association for Computing Machinery.",
year = "2019",
month = oct,
doi = "10.1145/3323233",
language = "English (US)",
volume = "19",
journal = "ACM Transactions on Internet Technology",
issn = "1533-5399",
publisher = "Association for Computing Machinery (ACM)",
number = "3",
}