Towards an Adaptive Multi-Level RBAC Mechanism for Countering Insider Misuse

This paper proposes an extended RBAC model for countering insider misuse, which provides scalability and flexibility. Multi-level security and context-awareness are introduced into the model to fit in with the particular appliance. A mechanism for insider misuse prevention is presented based on the model. To detect and prevent insider misbehavior, the insider´s behavior pattern is analyzed and the probability of misuse is estimated, based on the enforced prevention policies. As a proof, finally an experimental verification is carried out based on the approach.