Auditing file system permissions using association rule mining

作者：

Highlights：

• Modelling Microsoft’s New Technology File System permissions for analysis.

• Using association rule mining to identify irregular file system permissions.

• Development of a two-stage tool for auditing Microsoft’s New Technology File System.

• Accuracy greater than 90% for both real-world and synthetic directory structures.

摘要

•Modelling Microsoft’s New Technology File System permissions for analysis.•Using association rule mining to identify irregular file system permissions.•Development of a two-stage tool for auditing Microsoft’s New Technology File System.•Accuracy greater than 90% for both real-world and synthetic directory structures.

论文关键词：Access control,Auditing,Association rule mining

论文评审过程：Received 18 August 2015, Revised 11 February 2016, Accepted 12 February 2016, Available online 18 February 2016, Version of Record 4 March 2016.

论文官网地址：https://doi.org/10.1016/j.eswa.2016.02.027