{"id":"https://openalex.org/W7164482726","doi":"https://doi.org/10.1145/3800506.3803515","title":"Active Learning of Negative Relationship-Based Authorizations","display_name":"Active Learning of Negative Relationship-Based Authorizations","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W7164482726","doi":"https://doi.org/10.1145/3800506.3803515"},"language":null,"primary_location":{"id":"doi:10.1145/3800506.3803515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803515","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3800506.3803515","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087450858","display_name":"Ferhat Demirk\u0131ran","orcid":"https://orcid.org/0000-0001-7335-9370"},"institutions":[{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ferhat Demirkiran","raw_affiliation_strings":["Computer Science, University at Albany - SUNY, Albany, NY, USA"],"raw_orcid":"https://orcid.org/0000-0001-7335-9370","affiliations":[{"raw_affiliation_string":"Computer Science, University at Albany - SUNY, Albany, NY, USA","institution_ids":["https://openalex.org/I392282"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001727758","display_name":"Amir Masoumzadeh","orcid":"https://orcid.org/0000-0003-0647-7785"},"institutions":[{"id":"https://openalex.org/I392282","display_name":"University at Albany, State University of New York","ror":"https://ror.org/012zs8222","country_code":"US","type":"education","lineage":["https://openalex.org/I392282"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amir Masoumzadeh","raw_affiliation_strings":["Computer Science, University at Albany - SUNY, Albany, NY, USA"],"raw_orcid":"https://orcid.org/0000-0003-0647-7785","affiliations":[{"raw_affiliation_string":"Computer Science, University at Albany - SUNY, Albany, NY, USA","institution_ids":["https://openalex.org/I392282"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I392282"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"35","last_page":"46"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.1298999935388565,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.1298999935388565,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.11219999939203262,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.10419999808073044,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/active-learning","display_name":"Active learning (machine learning)","score":0.5716999769210815},{"id":"https://openalex.org/keywords/authorization","display_name":"Authorization","score":0.429500013589859},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2793000042438507},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.24310000240802765},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.23989999294281006}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5795000195503235},{"id":"https://openalex.org/C77967617","wikidata":"https://www.wikidata.org/wiki/Q4677561","display_name":"Active learning (machine learning)","level":2,"score":0.5716999769210815},{"id":"https://openalex.org/C108759981","wikidata":"https://www.wikidata.org/wiki/Q788590","display_name":"Authorization","level":2,"score":0.429500013589859},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.429500013589859},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.24310000240802765},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.23989999294281006},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.23899999260902405},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.226500004529953},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.22529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3800506.3803515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803515","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3800506.3803515","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3800506.3803515","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Sixteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5620485544204712,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W2000107752","https://openalex.org/W2293200572","https://openalex.org/W2618541213","https://openalex.org/W2805336398","https://openalex.org/W2888685578","https://openalex.org/W2947413737","https://openalex.org/W3028881048","https://openalex.org/W4220762789","https://openalex.org/W4280649132"],"related_works":[],"abstract_inverted_index":{"Relationship-based":[0],"access":[1],"control":[2],"(ReBAC)":[3],"policies":[4,209],"naturally":[5],"express":[6],"authorization":[7,29,45,126,145,187],"decisions":[8,30],"over":[9],"complex":[10],"relationships,":[11],"but":[12,83],"their":[13],"expressiveness":[14],"makes":[15],"them":[16],"difficult":[17],"to":[18,49,69,149,178],"audit,":[19],"validate,":[20],"migrate,":[21],"and":[22,51,72,116,132,139,171,189,234],"maintain.":[23],"Learning":[24],"ReBAC":[25,61,107,158],"policy":[26],"using":[27],"observed":[28],"can":[31],"help":[32],"in":[33,40,229],"these":[34],"tasks,":[35],"yet":[36],"it":[37],"remains":[38],"challenging":[39],"real":[41],"deployments":[42],"where":[43],"complete":[44,67],"logs":[46,68,77],"are":[47,58],"hard":[48],"obtain":[50],"expressive":[52],"features":[53],"such":[54,184],"as":[55,185,236,238],"\\deny":[56,73,140,172],"rules":[57,74,141],"common.":[59],"Existing":[60],"mining":[62,155],"approaches":[63],"either":[64],"rely":[65],"on":[66,153,206,223],"infer":[70],"\\permit":[71,86,138,170],"or":[75],"avoid":[76],"via":[78],"an":[79,134],"active":[80,100,114,181],"learning":[81,101,115,182,232],"framework":[82,102,228],"learn":[84],"only":[85],"rules,":[87],"leaving":[88],"explicit":[89],"denials":[90],"indistinguishable":[91],"from":[92,211],"deny-by-default":[93],"behavior.":[94],"This":[95],"paper":[96],"extends":[97],"the":[98,120,125,150,167,179,198,201,216,224],"earlier":[99,180],"by":[103],"introducing":[104],"ARDEN":[105,160,205],"(Active":[106],"Discovery":[108],"with":[109,119],"Explicit":[110],"Negatives),":[111],"a":[112,129,162,190,212,239],"multi-phase":[113],"optimization":[117],"workflow":[118],"goal":[121],"of":[122,128,137,156,169,200,215,226,231],"minimally":[123],"exploring":[124],"space":[127],"target":[130],"system":[131],"composing":[133],"optimal":[135],"set":[136],"that":[142,195],"capture":[143],"its":[144],"decisions.":[146],"In":[147],"contrast":[148],"recent":[151],"work":[152],"offline":[154],"negative":[157],"policies,":[159],"uses":[161],"unified":[163],"strategy":[164],"for":[165],"optimizing":[166],"selection":[168],"rules.":[173],"We":[174,203,221],"also":[175],"propose":[176],"enhancements":[177],"architecture":[183],"cache-assisted":[186],"queries":[188],"state-prefix":[191],"random":[192],"walk":[193],"oracle":[194],"significantly":[196],"impact":[197],"performance":[199,225],"framework.":[202],"evaluate":[204],"18":[207],"configuration-induced":[208],"derived":[210],"controlled":[213],"deployment":[214],"HotCRP":[217],"conference":[218],"management":[219],"system.":[220],"report":[222],"our":[227],"terms":[230],"accuracy":[233],"cost,":[235],"well":[237],"comparative":[240],"evaluation":[241],"against":[242],"three":[243],"baseline":[244],"approaches.":[245]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-13T00:00:00"}