MUTUAL EXCLUSION ROLE CONSTRAINT MINING BASED ON WEIGHT IN ROLE-BASED ACCESS CONTROL SYSTEM

摘要

Role-based access control (RBAC) is the most popular access control model at present, and has become the norm in many applications. Role engineering is a way to migrate a non-RBAC system to an RBAC system. However, none of the role engineering work has employed mutual exclusion role constraint mining based on weight to our knowledge although constraint is an important aspect of RBAC, thus providing the motivation for this work. In this paper, we first define the weight of permission by considering the attributes of user and permission, and then study how to generate mutual exclusion role constraint based on weight. Finally, experiments on performance study prove the superiority of our approach.