{"id":"https://openalex.org/W2955265295","doi":"https://doi.org/10.1186/s42400-019-0036-9","title":"On the use of Max-SAT and PDDL in RBAC maintenance","display_name":"On the use of Max-SAT and PDDL in RBAC maintenance","publication_year":2019,"publication_date":"2019-07-01","ids":{"openalex":"https://openalex.org/W2955265295","doi":"https://doi.org/10.1186/s42400-019-0036-9","mag":"2955265295"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-019-0036-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0036-9","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-019-0036-9","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-019-0036-9","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013020489","display_name":"Marco Benedetti","orcid":"https://orcid.org/0000-0003-1525-6677"},"institutions":[{"id":"https://openalex.org/I103737770","display_name":"Bank of Italy","ror":"https://ror.org/03v2nbx43","country_code":"IT","type":"funder","lineage":["https://openalex.org/I103737770"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Benedetti","raw_affiliation_strings":["Bank of Italy, ICT Department, Centro Donato Menichella, Roma, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bank of Italy, ICT Department, Centro Donato Menichella, Roma, Italy","institution_ids":["https://openalex.org/I103737770"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091176505","display_name":"Marco Mori","orcid":"https://orcid.org/0000-0002-7275-3509"},"institutions":[{"id":"https://openalex.org/I103737770","display_name":"Bank of Italy","ror":"https://ror.org/03v2nbx43","country_code":"IT","type":"funder","lineage":["https://openalex.org/I103737770"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Mori","raw_affiliation_strings":["Bank of Italy, ICT Department, Centro Donato Menichella, Roma, Italy"],"raw_orcid":"https://orcid.org/0000-0002-7275-3509","affiliations":[{"raw_affiliation_string":"Bank of Italy, ICT Department, Centro Donato Menichella, Roma, Italy","institution_ids":["https://openalex.org/I103737770"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I103737770"],"apc_list":{"value":0,"currency":"USD","value_usd":0},"apc_paid":null,"fwci":1.9413,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.89429254,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"2","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10456","display_name":"Multi-Agent Systems and Negotiation","score":0.9855999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9836999773979187,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.8851914405822754},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7927067279815674},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6212339401245117},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5956680178642273},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5610001683235168},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.5466225743293762},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.470277339220047},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.4657825827598572},{"id":"https://openalex.org/keywords/separation-of-duties","display_name":"Separation of duties","score":0.43520379066467285},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.4334059953689575},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.11719831824302673},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.08137983083724976}],"concepts":[{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.8851914405822754},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7927067279815674},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6212339401245117},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5956680178642273},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5610001683235168},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.5466225743293762},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.470277339220047},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.4657825827598572},{"id":"https://openalex.org/C100587491","wikidata":"https://www.wikidata.org/wiki/Q1474665","display_name":"Separation of duties","level":4,"score":0.43520379066467285},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.4334059953689575},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11719831824302673},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.08137983083724976},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-019-0036-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0036-9","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-019-0036-9","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:89c6a64f2b2c4a26a3de8a64e39877e0","is_oa":true,"landing_page_url":"https://doaj.org/article/89c6a64f2b2c4a26a3de8a64e39877e0","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 2, Iss 1, Pp 1-25 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-019-0036-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-019-0036-9","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-019-0036-9","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2955265295.pdf","grobid_xml":"https://content.openalex.org/works/W2955265295.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1489183362","https://openalex.org/W1566129741","https://openalex.org/W1968110920","https://openalex.org/W1989299447","https://openalex.org/W2001847277","https://openalex.org/W2036265926","https://openalex.org/W2040924621","https://openalex.org/W2076231649","https://openalex.org/W2087493323","https://openalex.org/W2125830297","https://openalex.org/W2133527541","https://openalex.org/W2137577559","https://openalex.org/W2140965492","https://openalex.org/W2146356111","https://openalex.org/W2149816156","https://openalex.org/W2154765153","https://openalex.org/W2155471467","https://openalex.org/W2162758782","https://openalex.org/W2163328802","https://openalex.org/W2165355942","https://openalex.org/W2277593056","https://openalex.org/W2527730699","https://openalex.org/W2549191282","https://openalex.org/W2806094030","https://openalex.org/W3021616496","https://openalex.org/W4241197470"],"related_works":["https://openalex.org/W2361825345","https://openalex.org/W2945232779","https://openalex.org/W2056139315","https://openalex.org/W2354790132","https://openalex.org/W2393886221","https://openalex.org/W2378809132","https://openalex.org/W2354055181","https://openalex.org/W1606180331","https://openalex.org/W2938177213","https://openalex.org/W1586718624"],"abstract_inverted_index":{"Role-Based":[0],"Access":[1],"Control":[2],"(RBAC)":[3],"policies":[4,35],"are":[5,92,95,103,118,127],"at":[6],"the":[7,14,52,140,159,166,178,188],"core":[8],"of":[9,16,25,177,208],"Cybersecurity":[10],"as":[11,112,114],"they":[12,100,126],"ease":[13],"enforcement":[15],"basic":[17],"security":[18],"principles,":[19],"e.g.,":[20],"Least":[21],"Privilege":[22],"and":[23,30,49,55,65,83,90,108,146,149,163,182,201],"Separation":[24],"Duties.":[26],"As":[27],"ICT":[28],"systems":[29],"business":[31],"processes":[32],"evolve,":[33],"RBAC":[34,78,86,161],"have":[36,121],"to":[37,40,44,69,81,105,122,186],"be":[38,110,123],"updated":[39],"prevent":[41],"unauthorised":[42],"access":[43],"resources":[45],"by":[46,131,151],"capturing":[47],"errors":[48],"misalignments":[50],"between":[51],"current":[53,133,160],"policy":[54],"reality.":[56],"However,":[57],"such":[58],"update":[59],"process":[60,80,142],"is":[61,67,171],"a":[62,76,137,174,214],"human-intensive":[63],"activity":[64],"it":[66],"expected":[68],"meet":[70],"specific":[71],"constraints.":[72],"This":[73],"paper":[74],"proposes":[75],"semi-automatic":[77],"maintenance":[79,141],"fix":[82],"refine":[84],"an":[85],"state":[87],"when":[88],"\u201cexceptions\u201d":[89],"\u201cviolations\u201d":[91],"detected.":[93],"Exceptions":[94],"permissions":[96,119],"some":[97],"users":[98],"realise":[99],"miss":[101],"that":[102,120],"instrumental":[104],"their":[106,132],"job":[107],"should":[109],"granted":[111],"soon":[113],"possible,":[115],"while":[116],"violations":[117,150],"revoked":[124],"since":[125],"no":[128],"longer":[129],"required":[130],"owners.":[134],"We":[135],"propose":[136],"formalisation":[138,176],"for":[139],"which":[143,205],"fixes":[144],"single":[145],"multiple":[147],"exceptions":[148],"balancing":[152],"two":[153],"conflicting":[154],"objectives,":[155],"i.e.,":[156],"(i)":[157],"optimising":[158],"state,":[162],"(ii)":[164],"reducing":[165],"transition":[167,189],"cost.":[168,193],"Our":[169,194],"approach":[170],"based":[172],"on":[173,183,197,220],"Max-SAT":[175,199],"constraint-based":[179],"optimisation":[180],"problem,":[181],"PDDL":[184,203],"planning":[185],"define":[187],"strategy":[190],"with":[191,213],"minimum":[192],"implementation":[195],"relies":[196],"incomplete":[198],"solvers":[200],"satisficing":[202],"planners":[204],"provide":[206],"approximations":[207],"optimal":[209],"solutions.":[210],"Experiments":[211],"along":[212],"comparative":[215],"evaluation":[216],"show":[217],"good":[218],"performance":[219],"real-world":[221],"benchmarks.":[222]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":2}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}