Trust-based Dynamic RBAC

Tamir Lavi, Ehud Gudes

2016

Abstract

A prominent feature of almost every computerized system is the presence of an access control module. The Role Based Access Control (RBAC) model is among the most popular in both academic research and in practice, within actual implementation of many applications and computer infrastructures. The RBAC model simplifies the way that a system administrator controls the assignment of permissions to individuals by assigning permissions to roles and roles to users. The growth in web applications which enable the access of world-wide and unknown users, expose these applications to various attacks. This led few researchers to suggest ways to incorporate trust within RBAC to achieve even better control over the assignment of users to roles, and permissions within roles, based on the user trust level. In this work, we present a new trust-based RBAC model which improves and refines the assignment of permissions to roles with awareness of the user trust and reputation. After describing the basic model, called TDRBAC for Trust-based Dynamic RBAC, we describe ways to deal with issues like privacy-preservation and delegation of roles with the consideration of user’s trust.

Paper Citation

in Harvard Style

Lavi T. and Gudes E. (2016). Trust-based Dynamic RBAC . In Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-167-0, pages 317-324. DOI: 10.5220/0005687503170324

in Bibtex Style

@conference{icissp16,
author={Tamir Lavi and Ehud Gudes},
title={Trust-based Dynamic RBAC},
booktitle={Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2016},
pages={317-324},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005687503170324},
isbn={978-989-758-167-0},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 2nd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Trust-based Dynamic RBAC
SN - 978-989-758-167-0
AU - Lavi T.
AU - Gudes E.
PY - 2016
SP - 317
EP - 324
DO - 10.5220/0005687503170324