Administrator-centered access control failures can cause data breaches, putting organizations at risk of financial loss and reputation damage. Existing graphical policy configuration tools and automated policy generation frameworks attempt to help administrators configure and generate access control policies by avoiding such failures. However, graphical policy configuration tools are prone to human errors, making them unusable. On the other hand, automated policy generation frameworks are prone to erroneous predictions, making them unreliable. Therefore, to find ways to improve their usability and reliability, we conducted a Systematic Literature Review analyzing 49 publications, to identify those tools, frameworks, and their limitations. Identifying those limitations will help develop effective access control policy generation solutions while avoiding access control failures.
翻译:以管理员为中心的访问控制失误可能导致数据泄露,使组织面临财务损失和声誉损害的风险。现有的图形化策略配置工具和自动化策略生成框架旨在通过避免此类失误来帮助管理员配置和生成访问控制策略。然而,图形化策略配置工具容易产生人为错误,导致其不可用;另一方面,自动化策略生成框架容易产生错误预测,使其不可靠。因此,为了寻找提高其可用性和可靠性的方法,我们进行了系统性文献综述,分析了49篇出版物,以识别这些工具、框架及其局限性。识别这些局限性将有助于开发有效的访问控制策略生成解决方案,同时避免访问控制失误。