Volume 5 Number 5 (Sep. 2016)
Home > Archive > 2016 > Volume 5 Number 5 (Sep. 2016) >
IJCCE 2016 Vol.5(5): 374-380 ISSN: 2010-3743
DOI: 10.17706/IJCCE.2016.5.5.374-380

The RBAC System Based on Role Risk and User Trust

Caiyuan Jin, Aodong Shen, Wenxue Yu
Abstract—The risk problem of access control model is always the key point of security management. In this paper, we introduce the risk factor to control the risk of role under the proposed threshold when building RBAC policy based on role mining. At the same time, a user should meet some demands to activate roles. So we propose the following principal. A user could activate a role when his trust is higher than the trust threshold of the candidate role. This method makes role authority more reasonable and it avoids of the abuse of permissions. Experiments on performance indicate that the proposed algorithm can not only build the complete RBAC system to avoid roles’ high risk caused by the high complexity of permissions in roles, but also meet the least privilege when a user activates a role.

Index Terms—RBAC, role mining, role risk, user trust.

The authors are with the School of Computer Science and Engineering, Southeast University in Nanjing, Jiangsu Province, China.

Cite:Caiyuan Jin, Aodong Shen, Wenxue Yu, "The RBAC System Based on Role Risk and User Trust," International Journal of Computer and Communication Engineering vol. 5, no. 5, pp. 374-380, 2016.

General Information

ISSN: 2010-3743
Frequency: Quarterly
Editor-in-Chief: Dr. Maode Ma
Abstracting/ Indexing: EI (INSPEC, IET), Google Scholar, Crossref, Engineering & Technology Digital Library, ProQuest, and Electronic Journals Library
E-mail: ijcce@iap.org
  • Mar 31, 2016 News!

    IJCCE Vol. 4, No. 5 has been indexed by EI (Inspec) Inspec, created by the Institution of Engineering and Tech.!   [Click]

  • Jun 16, 2017 News!

    Vol. 4, No. 5 has been indexed by EI (Inspec)!   [Click]

  • Jun 15, 2017 News!

    Vol. 4, No. 4 has been indexed by EI (Inspec)!   [Click]

  • Jun 14, 2017 News!

    ICCNT 2017 will be held in Zurich, Switzerland during September 1-3, 2017 ! Welcome to submit your paper to ICCNT 2017 !   [Click]

  • Jun 14, 2017 News!

    Vol. 4, No. 3 has been indexed by EI (Inspec)!   [Click]

  • Read more>>