A scenario-driven role engineering process for functional RBAC roles

Proceedings of ACM Symposium on Access Control Models and Technologies (SACMAT 2002)

Volumn , Issue , 2002, Pages 33-42

  Neumann, Gustaf ^a   Strembeck, Mark ^a  

^a VIENNA UNIVERSITY OF ECONOMICS AND BUSINESS   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

HUMAN ENGINEERING; MANAGEMENT INFORMATION SYSTEMS; SECURITY OF DATA; SYSTEMS ANALYSIS;

ROLE BASE ACCESS CONTROL; SCENARIO DRIVEN ROLE ENGINEERING PROCESS;

COMPUTER AIDED SOFTWARE ENGINEERING;

EID: 0242709332     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/507716.507717     Document Type: Conference Paper

References (25)

1. G. Booch, I. Jacobson, and J. Rumbaugh. The Unified Modeling Language User Guide. Addison-Wesley, 1999.
2. J.M. Carroll. Five reasons for scenario-based design. In Proc. of the IEEE Annual Hawaii International Conference on System Sciences (HICSS), 1999.
3. E.J. Coyne. Role engineering. In Proc. of the ACM Workshop on Role-Based Access Control, 1996.
4. J. M. Carroll (ed.). Scenario-Based Design: Envisioning Work and Technology in System Development. John Wiley and Sons, 1995.
5. P. Epstein and R. Sandhu. Towards A UML Based Approach to Role Engineering. In Proc. of the ACM Workshop on Role-Based Access Control, 1999.
6. P. Epstein and R. Sandhu. Engineering of Role/Permission Assignments. In Proc. of the 17th Annual Computer Security Applications Conference (ACSAC), December 2001.
7. E.B. Fernandez and J.C. Hawkins. Determining role rights from use cases. In Proc. of the ACM Workshop on Role-Based Access Control, 1997.
8. D.F. Ferraiolo, J.F. Barkley, and D.R. Kuhn. A Role-Based Access Control Model and Reference Implementation within a Corporate Intranet. ACM Transactions on Information and System Security, 2(1) February 1999.
9. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D.R. Kuhn, and R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and System Security, 4(3), August 2001.
10. C. Goh and A. Baldwin. Towards a more complete model of role. In Proc. of the ACM Workshop on Role-Based Access Control, 1998.
11. O. Gotel and A. Finkelstein, An analysis of the requirements traceability problem. In Proc. of the IEEE International Conference on Requirements Engineering (ICRE), 1994.
12. K. Gutzmann, Access control and session management in the HTTP environment. IEEE Internet Computing, January/February 2001.
13. I. Jacobson, Object-Oriented Software Engineering. Addison-Wesley, 1992.
14. M. Jarke, X. T. Bui, and J.M. Carroll. Scenario management: An interdisciplinary approach. Requirements Engineering Journal, 3(3/4), 1998.
15. C. Kaner, J. Falk, and H.Q. Nguyen, Testing Computer Software (second edition). John Wiley and Sons, 1999.
16. G. Kotonya and I. Sommerville, Requirements Engineering - Processes and Techniques. John Wiley & Sons, 1998.
17. G. Neumann and M. Strembeck. Design and Implementation of a Flexible RBAC-Service in an Object-Oriented Scripting Language. In Proc. of the 8th ACM Conference on Computer and Communications Security (CCS), November 2001.
18. W.E. Perry, Effective Methods for Software Testing (second edition). John Wiley & Sons, 2000.
19. B. Ramesh and M. Jarke. Toward reference models for requirements traceability. IEEE Transactions on Software Engineering, 27(1), January 2001.
20. S. Robertson and J. Robertson. Mastering the Requirements Process. Addison-Wesley, 1999.
21. H. Roeckle, G. Schimpf, and R. Weidinger. Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In Proc. of the ACM Workshop on Role-Based Access Control, 2000.
22. C. Rolland, G. Grosz, and R. Kla. Experience with goal-scenario coupling in requirements engineering. In Proc. of the IEEE International Symposium on Requirements Engineering (RE), 1998.
23. R.S. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman. Role-based access control models. IEEE Computer, 29(2), February 1996.
24. The UNIVERSAL Brokerage Platform Homepage. http://www.ist-universal.org.
25. A. van Lamsweerde, Goal-Oriented Requirements Engineering: A Guided Tour. In Proc. of the 5th IEEE International Symposium on Requirements Engineering (RE), August 2001.