摘要
现有的角色挖掘算法只为追求得到最小角色集的挖掘结果,并没有考虑到系统中的职责分离(Separation of Duty,SoD),而SoD是维护系统安全的重要约束。对此,提出一种基于职责分离的角色挖掘算法。将用户权限关系转化成布尔矩阵表示,利用权限分组的方法在角色挖掘过程中为角色赋予SoD约束信息。生成静态互斥角色t-t SMER(Statically Mutually Exclusive Roles,SMER)约束集,利用该约束集实现系统中SoD约束。实验结果表明该算法执行效率高,能够有效维护系统安全。
The existing role mining algorithm only seeks the mining result of the minimum character set,and does not consider the separation of duty(SoD)in the system.SoD is an important constraint to maintain system security.Aiming at this,this paper proposes a role mining algorithm based on separation of duty.It transformed the user authority relationship into a Boolean matrix representation,and used the rights grouping method to give SoD constraint information to roles in the role mining process.The static mutual exclusion role t-t SMER(Statically Mutually Exclusive Roles)constraint set was generated,which was used to implement SoD constraints in the system.The experimental results show that the algorithm has high execution efficiency and can effectively maintain system security.
作者
王静宇
崔永娇
Wang Jingyu;Cui Yongjiao(School of Information Engineering,Inner Mongolia University of Science&Technology,Baotou 014010,Inner Mongolia,China)
出处
《计算机应用与软件》
北大核心
2021年第2期305-310,共6页
Computer Applications and Software
基金
国家自然科学基金项目(61662056)。
关键词
角色挖掘
布尔矩阵
职责分离
静态互斥角色
Role mining
Boolean matrix
Separation of duty
Static mutually exclusive roles
