DEBAC: Dynamic Explainable Behavior-Based Access Control

Traditional access control mechanisms rely on static policies that lack flexibility in adapting to dynamic security threats. In this paper, we present DEBAC: a Dynamic Explainable Behavior-based Access Control architecture, which supports a dynamic assessment of a device trust. Our approach leverages Explainable Boosting Machines (EBMs) to compute a trust score in real-time while providing human-interpretable explanations for access decisions. This dynamic and explainable trust evaluation serves as the cornerstone for defining adaptive access policies, supporting a dynamic response to behavioral deviations. We demonstrate the feasibility of DEBAC with real-life data from a campus WLAN, proving the ability of EBMs to accurately distinguishing between devices while providing a human interpretable explanation for the classification.