Auditing file system permissions using association rule mining

Simon Parkinson, Vassiliki Somaraki, R. Ward

Abstract: Highlights•Modelling Microsoft’s New Technology File System permissions for analysis.•Using association rule mining to identify irregular file system permissions.•Development of a two-stage tool for auditing Microsoft’s New Technology File System.•Accuracy greater than 90% for both real-world and synthetic directory structures.