Advertisement

A Case Study on the Suitability of Process Mining to Produce Current-State RBAC Models

  • Maria Leitner
  • Anne Baumgrass
  • Sigrid Schefer-Wenzl
  • Stefanie Rinderle-Ma
  • Mark Strembeck
Part of the Lecture Notes in Business Information Processing book series (LNBIP, volume 132)

Abstract

Role-based access control (RBAC) is commonly used to implement authorization procedures in Process-aware information systems (PAIS). Process mining refers to a bundle of algorithms that typically discover process models from event log data produced during the execution of real-world processes. Beyond pure control flow mining, some techniques focus on the discovery of organizational information from event logs. However, a systematic analysis and comparison of these approaches with respect to their suitability for mining RBAC models is still missing. This paper works towards filling this gap and provides a first guidance for applying mining techniques for deriving RBAC models.

Keywords

Process Mining RBAC Security in Business Processes 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Baumgrass, A.: Deriving Current-State RBAC Models from Event Logs. In: Proc. of the 6th International Conference on Availability, Reliability and Security (ARES). IEEE Computer Society (2011)Google Scholar
  2. 2.
    Baumgrass, A., Schefer-Wenzl, S., Strembeck, M.: Deriving Process-Related RBAC Models from Process Execution Histories. In: Proc. of the 2012 IEEE 36th Int. Conference on Computer Software and Applications Workshops. IEEE Computer Society (2012)Google Scholar
  3. 3.
    Ferraiolo, D.F., Kuhn, R.D., Chandramouli, R.: Role-Based Access Control, 2nd edn. Artech House, Inc., Norwood (2007)Google Scholar
  4. 4.
    Ly, L., Rinderle, S., Dadam, P., Reichert, M.: Mining Staff Assignment Rules from Event-Based Data. In: Bussler, C., Haller, A. (eds.) BPM 2005. LNCS, vol. 3812, pp. 177–190. Springer, Heidelberg (2006)CrossRefGoogle Scholar
  5. 5.
    de Medeiros, A.K.A., Günther, C.W.: Process Mining: Using CPN Tools to Create Test Logs for Mining Algorithms. In: Proc. of the 6th Workshop and Tutorial on Practical Use of Coloured Petri Nets and the CPN Tools (2005)Google Scholar
  6. 6.
    de Medeiros, A.K.A., van den Brand, P., van der Aalst, W.M.P., Weijters, T., Gaaloul, W., Pedrinaci, C.: Semantic Process Mining Tool - Final Implementation, Deliverable 6.11, Project IST 026850 SUPER (September 2008)Google Scholar
  7. 7.
    Song, M., van der Aalst, W.M.P.: Towards comprehensive support for organizational mining. Decision Support Systems 46(1) (2008)Google Scholar
  8. 8.
    Strembeck, M.: A Role Engineering Tool for Role-Based Access Control. In: Proc. of the 3rd Symposium on Requirements Engineering for Information Security (SREIS) (August 2005)Google Scholar
  9. 9.
    Strembeck, M., Mendling, J.: Modeling process-related RBAC models with extended UML activity models. Information and Software Technology 53(5) (2011)Google Scholar
  10. 10.
    van der Aalst, W.M.P.: Process Mining - Discovery, Conformance and Enhancement of Business Processes. Springer (2011)Google Scholar
  11. 11.
    van der Aalst, W.M.P., van Dongen, B.F., Günther, C., Rozinat, A., Verbeek, H.M.W., Weijters, A.J.M.M.: ProM: The Process Mining Toolkit. In: Proc. of the BPM 2009 Demonstration Track. vol. 489. CEUR-WS.org (September 2009)Google Scholar
  12. 12.
    Zhang, D., Ramamohanarao, K., Ebringer, T., Yann, T.: Permission Set Mining: Discovering Practical and Useful Roles. In: Proc. of the 2008 Annual Computer Security Applications Conference. IEEE Computer Society (2008)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Maria Leitner
    • 1
  • Anne Baumgrass
    • 2
  • Sigrid Schefer-Wenzl
    • 2
  • Stefanie Rinderle-Ma
    • 1
  • Mark Strembeck
    • 2
  1. 1.Faculty of Computer ScienceUniversity of ViennaAustria
  2. 2.Institute for Information Systems, New Media LabVienna University of Economics and Business (WU Vienna)Austria

Personalised recommendations