作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程

• 人工智能及识别技术 • 上一篇    下一篇

基于互斥权限约束的角色挖掘优化方法

孙 伟a,苏 辉b ,李艳灵a   

  1. (信阳师范学院a. 计算机与信息技术学院; b. 网络信息与计算中心,河南信阳464000)
  • 收稿日期:2013-12-20 出版日期:2014-11-15 发布日期:2014-11-13
  • 作者简介:孙 伟(1981 - ),男,讲师、硕士,主研方向:访问控制,系统安全;苏 辉,副教授、硕士;李艳灵,副教授、博士。
  • 基金资助:
    国家自然科学基金资助项目(61202194);河南省教育厅科学技术研究基金资助重点项目(13A520765);河南省信息技术教育 研究基金资助项目(ITE12192)。

Optimization Method of Role Mining Based on Mutually Exclusive Permissions Constraints

SUN Wei a ,SU Hui b ,LI Yanling a   

  1. (a. School of Computer and Information Technology; b. Network Information and Computing Center, Xinyang Normal University,Xinyang 464000,China)
  • Received:2013-12-20 Online:2014-11-15 Published:2014-11-13

摘要: 现有自底向上的角色工程方法挖掘规模庞大,挖掘结果存在冗余,且不能反映系统功能的安全需求。为优 化角色结果,针对角色优化中的互斥约束问题,结合枚举角色挖掘,提出一种基于互斥权限约束的角色挖掘优化方 法。利用用户聚类元组及互斥约束优化角色挖掘过程,通过角色职责分离对安全约束的合理性进行分析,采用矩 阵分析法调整已挖掘权限的矩阵单元值,挖掘优化角色以覆盖所有权限。实验结果表明,通过权限覆盖分析法辅 助挖掘的优化角色结果能够保证挖掘过程的完整性;与枚举挖掘法相比,该方法能够保证信息系统的安全性,降低角色结果的冗余度。

关键词: 基于角色的访问控制, 角色工程, 角色挖掘, 角色优化, 互斥权限约束, 访问控制矩阵

Abstract: Mining roles in large scale organizations are very redundant and can not reflect system security requirements in existing approaches to bottom-up role engineering. In order to discover optimal roles, this paper proposes an optimization method for role mining,which is based on the enumeration approach to role mining. The method utilizes mutually exclusive permissions constraints to optimize the role mining process by clustering users. It analyzes the correctness of secure constraints by using separation of duty,and cells’ values of mining permissions are adjusted in access control matrix. The method mines roles that cover all permissions. Experimental results show that the set of optimal roles can ensure the completeness of role mining. Compared with the enumeration method,the optimization method can reduce the redundancy of roles and ensure system security.

Key words: Role-based Access Control(RBAC), role engineering, role mining, role optimization, mutually exclusive permissions constraints, access control matrix

中图分类号: