{"id":"https://openalex.org/W2085952809","doi":"https://doi.org/10.1145/1952982.1952984","title":"Detecting and resolving policy misconfigurations in access-control systems","display_name":"Detecting and resolving policy misconfigurations in access-control systems","publication_year":2011,"publication_date":"2011-05-01","ids":{"openalex":"https://openalex.org/W2085952809","doi":"https://doi.org/10.1145/1952982.1952984","mag":"2085952809"},"language":"en","primary_location":{"id":"doi:10.1145/1952982.1952984","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1952982.1952984","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002939847","display_name":"Lujo Bauer","orcid":"https://orcid.org/0000-0002-8209-6792"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lujo Bauer","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080369104","display_name":"Scott Garriss","orcid":null},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Scott Garriss","raw_affiliation_strings":["Google, Mountain View, CA","Google, Mountain View, CA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA","institution_ids":["https://openalex.org/I1291425158"]},{"raw_affiliation_string":"Google, Mountain View, CA;","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074117167","display_name":"Michael K. Reiter","orcid":"https://orcid.org/0000-0001-7007-8274"},"institutions":[{"id":"https://openalex.org/I114027177","display_name":"University of North Carolina at Chapel Hill","ror":"https://ror.org/0130frc33","country_code":"US","type":"education","lineage":["https://openalex.org/I114027177"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael K. Reiter","raw_affiliation_strings":["University of North Carolina at Chapel Hill, NC"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of North Carolina at Chapel Hill, NC","institution_ids":["https://openalex.org/I114027177"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":20.3639,"has_fulltext":false,"cited_by_count":87,"citation_normalized_percentile":{"value":0.99128902,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"14","issue":"1","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9757000207901001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8893016576766968},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6734788417816162},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6097477078437805},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.58517986536026},{"id":"https://openalex.org/keywords/system-administrator","display_name":"System administrator","score":0.5257906913757324},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4860413670539856},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4552045166492462},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3474423885345459},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.0694090723991394}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8893016576766968},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6734788417816162},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6097477078437805},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.58517986536026},{"id":"https://openalex.org/C2780814629","wikidata":"https://www.wikidata.org/wiki/Q327353","display_name":"System administrator","level":2,"score":0.5257906913757324},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4860413670539856},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4552045166492462},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3474423885345459},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0694090723991394},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1952982.1952984","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1952982.1952984","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5299999713897705}],"awards":[{"id":"https://openalex.org/G3072516378","display_name":null,"funder_award_id":"N000141010155N000141010343","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G4185329034","display_name":null,"funder_award_id":"FA87500720028","funder_id":"https://openalex.org/F4320338294","funder_display_name":"Air Force Research Laboratory"},{"id":"https://openalex.org/G8159969164","display_name":null,"funder_award_id":"756998","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G864484945","display_name":null,"funder_award_id":"DAAD-19-02-1-0389","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"},{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1506285740","https://openalex.org/W1573569031","https://openalex.org/W1574845526","https://openalex.org/W1577844105","https://openalex.org/W1605329226","https://openalex.org/W1749560176","https://openalex.org/W1811337449","https://openalex.org/W1860215963","https://openalex.org/W1923195206","https://openalex.org/W2002204971","https://openalex.org/W2026807761","https://openalex.org/W2032131630","https://openalex.org/W2043978338","https://openalex.org/W2054075152","https://openalex.org/W2107801860","https://openalex.org/W2120255160","https://openalex.org/W2124260419","https://openalex.org/W2134294016","https://openalex.org/W2138623315","https://openalex.org/W2140073547","https://openalex.org/W2144675476","https://openalex.org/W2150500287","https://openalex.org/W2153075208","https://openalex.org/W2163328802","https://openalex.org/W2164673530","https://openalex.org/W2166602595","https://openalex.org/W2170496240","https://openalex.org/W2171807364","https://openalex.org/W2912122561","https://openalex.org/W2914982603","https://openalex.org/W4252476804","https://openalex.org/W4290757805"],"related_works":["https://openalex.org/W2468386885","https://openalex.org/W2398434059","https://openalex.org/W1975326709","https://openalex.org/W2186689279","https://openalex.org/W2901729341","https://openalex.org/W2148952798","https://openalex.org/W3166545041","https://openalex.org/W2088642402","https://openalex.org/W2340240862","https://openalex.org/W3164400660"],"abstract_inverted_index":{"Access-control":[0],"policy":[1],"misconfigurations":[2,68],"that":[3,49,59,121,130],"cause":[4],"requests":[5],"to":[6,38,43,46,52,95,100,105],"be":[7,53,63],"erroneously":[8],"denied":[9],"can":[10,62,124,140],"result":[11],"in":[12,18,65],"wasted":[13],"time,":[14],"user":[15],"frustration,":[16],"and,":[17],"the":[19,39,77,80,107,126,145,154,163],"context":[20],"of":[21,41,67,79,83,90,109,128,144,157],"particular":[22],"applications":[23],"(e.g.,":[24],"health":[25],"care),":[26],"very":[27],"severe":[28],"consequences.":[29],"In":[30],"this":[31],"article":[32],"we":[33],"apply":[34],"association":[35],"rule":[36],"mining":[37],"history":[40],"accesses":[42,129],"predict":[44,142],"changes":[45,61,75],"access-control":[47,119],"policies":[48],"are":[50,150],"likely":[51],"consistent":[54],"with":[55,70,162],"users'":[56],"intentions,":[57],"so":[58,86],"these":[60,74],"instituted":[64],"advance":[66],"interfering":[69],"legitimate":[71],"accesses.":[72],"Instituting":[73],"requires":[76],"consent":[78,102],"appropriate":[81],"administrator,":[82],"course,":[84],"and":[85,103,139],"a":[87,117],"primary":[88],"contribution":[89],"our":[91,122],"work":[92],"is":[93],"how":[94,104],"automatically":[96],"determine":[97],"from":[98,116],"whom":[99],"seek":[101],"minimize":[106],"costs":[108],"doing":[110],"so.":[111],"We":[112],"show":[113],"using":[114],"data":[115],"deployed":[118],"system":[120],"methods":[123],"reduce":[125],"number":[127],"would":[131],"have":[132],"incurred":[133],"costly":[134],"time-of-access":[135],"delays":[136],"by":[137],"43%,":[138],"correctly":[141],"58%":[143],"intended":[146],"policy.":[147],"These":[148],"gains":[149],"achieved":[151],"without":[152],"impacting":[153],"total":[155],"amount":[156],"time":[158],"users":[159],"spend":[160],"interacting":[161],"system.":[164]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":10},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":5},{"year":2012,"cited_by_count":5}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}