User role mining system for network multi-domain information

Abstract

The invention discloses a user role mining system for network multi-domain information, which is divided into four modules: a basic information acquisition module, a basic relationship network construction module, a multi-view community information fusion module, a community discovery and user role definition module. The basic information obtaining module is used for obtaining necessary basic information from the target network; The basic relationship network construction module is used to construct the corresponding relationship network through the obtained basic information; The multi-view community discovery module is used for constructing the basic relationship network. The community discovery and user role definition module is used to discover the privilege community relationship, determine the corresponding user role and the corresponding role / privilege correspondence according to the multi-view service privilege relationship network. As that user roles are mined out through thenetwork space multi-domain basic information, the community relationship among the user rights can be accurately found, and more network security risk introduced in the role definition process can beavoided.

Description

technical field [0001] The invention relates to an automatic network user role mining technology, in particular to a system for automatically mining user role information by using multi-domain information such as network physical domains, network domains, and information domains. Background technique [0002] An important task of network security management is to assign user rights to various management systems. Role-based access control is currently widely used in enterprise information security because it can better solve the complexity of user rights management. The successful implementation of role-based access control depends on a series of pre-defined roles and the assignment of correct permissions to each role. When the system is more complex, role design will also become a difficult task. In response to this problem, Kuhlmann M, Shohat D, Schimpf G, Role mining–revealing business roles for security administration using data mining technology. In: Proceedings of the8t...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problem of over-authorization or insufficient authorization due to the excessive complexity of user management authority in the prior art, the present invention proposes a user role mining system oriented to network multi-domain information

Images