Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments

IAM policy analysis typically emphasizes the authorization capabilities encoded in a policy, but security analyst review priority may also depend on the behavioral and environmental context surrounding a policy event. This paper evaluates whether contextual information provides measurable...