Fuzzy Approach to Role Based Access Control

The goal of access control is to allow only authorized users to access sensitive information. Role based access control (RBAC) is emerging as a generalized approach to security and has been shown to be applicable to a wide range of security requirements of organizations and applications [3]. Possibility of using RBAC approach to an environment with multiple policy domains further justifies the tremendous momentum seen in RBAC research in the recent years. However, with the increasing size of the problem domain represented by today’s huge information systems that cross organizational boundaries, the issue of management and complexity of security and providing its assurance poses daunting challenges. A fuzzy approach to addressing the issue of security can provide a pragmatic and promising new direction in this area.