# Mining Attribute-Based Access Control Policies from Logs

arXiv: https://arxiv.org/abs/1403.5715 · HTML: https://mlsanity.com/paper/1403.5715/

## Key facts

- Cited by 10 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 23 Mar 2014.

## Built on by (most cited first, 10 of 10)

- [Toward Deep Learning Based Access Control](https://mlsanity.com/paper/2203.15124/) (2022)
- [LMN: A Tool for Generating Machine Enforceable Policies from Natural Language Access Control Rules using LLMs](https://mlsanity.com/paper/2502.12460/) (2025)
- [Adaptive ABAC Policy Learning: A Reinforcement Learning Approach](https://mlsanity.com/paper/2105.08587/) (2021)
- [Machine Learning in Access Control: A Taxonomy and Survey](https://mlsanity.com/paper/2207.01739/) (2022)
- [PAMMELA: Policy Administration Methodology using Machine Learning](https://mlsanity.com/paper/2111.07060/) (2021)
- [Compiling Sufficient Governance Context from Declared Losses and Reachable States: Exact Observation-Contract Synthesis with Cardinality and Cost Objectives](https://mlsanity.com/paper/2609.26016/) (2026)
- [Quantifying Policy Administration Cost in an Active Learning Framework](https://mlsanity.com/paper/2401.00086/) (2023)
- [Towards Harnessing the Power of LLMs for ABAC Policy Mining](https://mlsanity.com/paper/2511.18098/) (2025)
- [Generation of Human Comprehensible Access Control Policies from Audit Logs](https://mlsanity.com/paper/2603.14341/) (2026)
- [Ajar: Measuring Open Privilege in Agent Defenses](https://mlsanity.com/paper/2609.26900/) (2026)

## Abstract (arXiv)

Attribute-based access control (ABAC) provides a high level of flexibility that promotes security and information sharing. ABAC policy mining algorithms have potential to significantly reduce the cost of migration to ABAC, by partially automating the development of an ABAC policy from information about the existing access-control policy and attribute data. This paper presents an algorithm for mining ABAC policies from operation logs and attribute data. To the best of our knowledge, it is the first algorithm for this problem.