Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques - Information Security Theory and Practice Access content directly
Conference Papers Year : 2015

Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques

Masoud Narouei
  • Function : Author
  • PersonId : 999038
Hassan Takabi
  • Function : Author
  • PersonId : 999039


A challenging problem in managing large networks is the complexity of security administration. Role Based Access Control (RBAC) is the most well-known access control model in diverse enterprises of all sizes because of its ease of administration as well as economic benefits it provides. Deploying such system requires identifying a complete set of roles which are correct and efficient. This process, called role engineering, has been identified as one of the most expensive tasks in migrating to RBAC. Numerous bottom-up, top-down, and hybrid role mining approaches have been proposed due to increased interest in role engineering in recent years. In this paper, we propose a new top-down role engineering approach and take the first step towards extracting access control policies from unrestricted natural language requirements documents. Most organizations have high-level requirement specifications that include a set of access control policies which describes allowable operations for the system. It is very time consuming, labor-intensive, and error-prone to manually sift through these natural language documents to identify and extract access control policies. We propose to use natural language processing techniques, more specifically Semantic Role Labeling (SRL) to automatically extract access control policies from these documents, define roles, and build an RBAC system. By successfully applying semantic role labeling to identify predicate-argument structure, and using a set of predefined rules on the extracted arguments, we were able correctly identify access control policies with a precision of 79%, recall of 88%, and F1 score of 82%.
Fichier principal
Vignette du fichier
978-3-319-24018-3_9_Chapter.pdf (484.32 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01442558 , version 1 (20-01-2017)





Masoud Narouei, Hassan Takabi. Automatic Top-Down Role Engineering Framework Using Natural Language Processing Techniques. 9th Workshop on Information Security Theory and Practice (WISTP), Aug 2015, Heraklion, Crete, Greece. pp.137-152, ⟨10.1007/978-3-319-24018-3_9⟩. ⟨hal-01442558⟩
157 View
204 Download



Gmail Facebook X LinkedIn More