Towards adaptive access control

Argento, Luciano, Margheri, Andrea, Paci, Federica, Sassone, Vladimiro and Zannone, Nicola (2018) Towards adaptive access control. In Data and Applications Security and Privacy XXXII - 32nd Annual IFIP WG 11.3 Conference, DBSec 2018, Proceedings. vol. 10980 LNCS, Springer. pp. 99-109 . (doi:10.1007/978-3-319-95729-6_7).

Record type: Conference or Workshop Item (Paper)

Abstract

Access control systems are nowadays the first line of defence of modern
IT systems. However, their effectiveness is often compromised by policy
miscofigurations that can be exploited by insider threats. In this paper, we present
an approach based on machine learning to refine attribute-based access control
policies in order to reduce the risks of users abusing their privileges. Our approach
exploits behavioral patterns representing how users typically access resources
to narrow the permissions granted to users when anomalous behaviors are detected. The proposed solution has been implemented and its effectiveness has been experimentally evaluated using a synthetic dataset.

Text

AdaptiveAccessControl - Accepted Manuscript

Available under License University of Southampton Accepted Manuscript Licence.

Download (365kB)