CAJ | 학술논문

现有自底向上的角色工程方法挖掘规模庞大，挖掘结果存在冗余，且不能反映系统功能的安全需求。为优化角色结果，针对角色优化中的互斥约束问题，结合枚举角色挖掘，提出一种基于互斥权限约束的角色挖掘优化方法。利用用户聚类元组及互斥约束优化角色挖掘过程，通过角色职责分离对安全约束的合理性进行分析，采用矩阵分析法调整已挖掘权限的矩阵单元值，挖掘优化角色以覆盖所有权限。实验结果表明，通过权限覆盖分析法辅助挖掘的优化角色结果能够保证挖掘过程的完整性；与枚举挖掘法相比，该方法能够保证信息系统的安全性，降低角色结果的冗余度。
현유자저향상적각색공정방법알굴규모방대，알굴결과존재용여，차불능반영계통공능적안전수구。위우화각색결과，침대각색우화중적호척약속문제，결합매거각색알굴，제출일충기우호척권한약속적각색알굴우화방법。이용용호취류원조급호척약속우화각색알굴과정，통과각색직책분리대안전약속적합이성진행분석，채용구진분석법조정이알굴권한적구진단원치，알굴우화각색이복개소유권한。실험결과표명，통과권한복개분석법보조알굴적우화각색결과능구보증알굴과정적완정성；여매거알굴법상비，해방법능구보증신식계통적안전성，강저각색결과적용여도。
Mining roles in large scale organizations are very redundant and can not reflect system security requirements in existing approaches to bottom-up role engineering. In order to discover optimal roles, this paper proposes an optimization method for role mining, which is based on the enumeration approach to role mining. The method utilizes mutually exclusive permissions constraints to optimize the role mining process by clustering users. It analyzes the correctness of secure constraints by using separation of duty,and cells’ values of mining permissions are adjusted in access control matrix. The method mines roles that cover all permissions. Experimental results show that the set of optimal roles can ensure the completeness of role mining. Compared with the enumeration method,the optimization method can reduce the redundancy of roles and ensure system security.