Detection of privilege abuse in RBAC administered database

Abstract

In this paper, we propose an approach for detection of database privilege abuse in Role Based Access Control (RBAC) administered database. The proposed approach extracts the data dependencies among the attributes of relations of the database. Role based data dependency rule miner (RBDDRM) algorithm is used to mine role-wise data dependencies from database log. These data dependencies are considered as role profiles, which are used to detect the misuse of privileges by database users.