From Theory to Practice: Implementing Effective Role-Based Access Control Strategies to Mitigate Insider Risks in Diverse Organizational Contexts
Journal of Engineering Research and Reports · pp. 138–154 · Published 10 Apr 2024
10.9734/jerr/2024/v26i51141Abstract
This study investigates the effectiveness of Role-Based Access Control (RBAC) systems in mitigating insider threats to database security within various organizational environments. Insider threats represent a significant challenge for database security, necessitating robust and adaptive security measures. By delineating access based on users' roles within an organization, RBAC emerges as a critical tool against such threats. Employing a quantitative research methodology, this work gathered data through a survey targeting professionals directly involved in the security and management of organizational databases across technology, finance, healthcare, and government industries. The study utilized Confirmatory Factor Analysis (CFA) and Structural Equation Modeling (SEM) to validate the measurement model and analyze the relationships between RBAC effectiveness, implementation challenges, RBAC enhancements, and their collective impact on insider threat reduction. Findings indicate that RBAC effectively reduces unauthorized access and data breaches, significantly mitigating insider threats. However, implementation challenges such as role definition complexity and adapting to dynamic access needs emerge as notable obstacles. Enhancements in RBAC, mainly through integrating technologies like machine learning and dynamic access controls, are identified as critical mediators that enhance RBAC's effectiveness. The study concludes that while RBAC is a vital tool for database security, its success depends on continuous improvement and customization to specific organizational contexts. It recommends developing continuous enhancement programs for RBAC systems, specialized training for administrators, and the customization of RBAC strategies to meet unique organizational and industry needs. These measures are crucial for optimizing RBAC's effectiveness against insider threats.
Cited by 14
John Kennedy Otieno Odego, Kennedy Odhiambo Ogada, Dennis Mugambi Kaburu · International Journal of Information Security and Privacy · 2025
Mathan N, Pavan Chaudhary, B Reddy · 2025 International Conference on Networks and Cryptology (NETCRYPT) · 2025
Rim Ben Salem, Frédéric Cuppens, Nora Boulahia-Cuppens · Lecture Notes in Computer Science · 2025
Xiaoming Li, Tho V. Le, Lóránt A. Tavasszy · 2025
Ziyuan Liu, Xinhong Hei, Yichuan Wang · 2025 International Conference on Networking and Network Applications (NaNA) · 2025
Georgios Germanos, Alexios Lekidis, Sotirios Brotsis · Future Generation Computer Systems · 2026
Jaikrishnan J, Harini S, Nanthini N · 2025 6th International Conference on IoT Based Control Networks and Intelligent Systems (ICICNIS) · 2025
Eunsu Jeong, Daeheon Yang · Applied Sciences · 2025
Seyed Mojtaba Hosseini Bamakan, Saeed Banaeian Far · Cyber Security and Applications · 2025
Showing 9 of 14 known citations — external sources report more than can currently be individually listed.
Related research
- Detecting Dental Caries through Captured Images Using the Machine Learning Technology Teachable Machine — shares topic coverage
- Prediction of Radiotherapy Dose Distribution for Glioblastoma Using Convolutional Neural Network Model — shares topic coverage
- A Systematic Literature Review of Machine Learning Methods in Healthcare — shares topic coverage
- Diagnostic Accuracy of Artificial Intelligence for Breast Cancer Detection: A Systematic Review — shares topic coverage
- Artificial Intelligence in the Analysis of the Fetal Genome in Utero: A Critical Review of Current Paradigms, Clinical Utility and Future Horizons — shares topic coverage
Article metrics
Real usage data collected on this platform.
24
Page views
0
PDF downloads
4
Outbound clicks
14
Citations
Views over time
Views by country
Approximate, from request IP at view time — not citizenship or institution. Countries with fewer than 5 views are grouped as "Other".
Traffic sources
Referring site, by host.
Views and downloads exclude known bots/crawlers. Citations combines this platform's own DOI-resolved index with each external source's own reported total — see Cited by above for individually listed citing works. Last refreshed 0 seconds ago.