Model driven security: Unification of authorization models for fine-grain access control

Proceedings - 7th IEEE International Enterprise Distributed Object Computing Conference

Volumn 2003-January, Issue January, 2003, Pages 159-171

  Burt, Carol C ^a   Bryant, Barrett R ^a   Raje, Rajeev R ^b   Olson, Andrew ^b   Auguston, Mikhail ^c  

^a UNIVERSITY OF ALABAMA AT BIRMINGHAM   (United States)

^b INDIANA UNIVERSITY   (United States)

^c NAVAL POSTGRADUATE SCHOOL   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MIDDLEWARE;

ACCESS CONTROL MODELS; COMPONENT DESCRIPTIONS; COMPONENT INTEGRATION; COMPONENT TECHNOLOGIES; COMPOSITION OF COMPONENTS; MODEL DRIVEN SECURITY; PLATFORM INDEPENDENT MODEL; PLATFORM SPECIFIC MODEL;

ACCESS CONTROL;

EID: 12344265148     PISSN: 15417719     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EDOC.2003.1233846     Document Type: Conference Paper

References (29)

1. Rajeev R. Raje, Barrett Bryant, Mikhail Auguston, Andrew Olson, Carol Burt. 2001. A Unified Approach for the Integration of Distributed Heterogeneous Software Components, Proceedings of the 2001 Monterey Workshop on Engineering Automation for Software Intensive System Integration, pp: 109-119.
2. Carol C. Burt, Barrett R. Bryant, Rajeev R. Raje, Andrew Olson. Mikhail Auguston. 2002. Quality of Service (QoS) Standards for Model Driven Architecture. Proceedings of the 2002 Southeastern Software Engineering Conference, pp. 521-529.
3. Carol C. Burt, Barrett R. Bryant, Rajeev R. Raje, Andrew Olson, Mikhail Auguston. 2002. Quality of Service Issues Related to Transforming Platform Independent Models to Platform Specific Models. Proceedings of EDOC 2002, the 6th IEEE International Enterprise Distributed Object Computing Conference, pp 212-223.
4. Object Management Group. Model Driven Architecture Guide. Technical Report. Document # omg/2003-05-01. Framingham, MA: Object Management Group. May 2003.
5. ITU-T Recommendation X. 812 (1995) | ISO/IEC 10181-3: 1995, Information Technology-Open Systems Interconnection-Security Frameworks for Open Systems-Access Control.
6. http:://www. globus. org.
7. K. Keahey, V. Welch. 2002. Fine-grain Authorization for Resource Management in the Grid Environment. Proceedings of Grid2002 Workshop.
8. http://www. oasis-open. org.
9. OASIS. 2003. The XACML 1. 0 Specification Set, available via http://www. oasis-open. org.
10. OASIS. 2002. Security Assertion Markup Language version 1. 0, available via http://www. oasis-open. org.
11. http://www. omg. org.
12. Object Management Group. 2001. Resource Access Decision Facility. formal/2001-04-01 (full specification) formal/2001-04-02 (OMG IDL). Available via http://www. omg. org/technology/documents/formal/ omg-security. htm.
13. Sun Microsystems. 2002. JavaTM Authentication and Authorization Service (JAAS) is part of Java 2 Platform Enterprise Edition Specification v1. 4, Available via ftp from www. java. sun. com. Sun Microsystems.
14. http://www. jcp. org.
15. Java Community Process. 2002. JSR 115-JavaTM Authorization Contract for Containers. Available for download from http://www. jcp. org.
16. http://www. microsoft. com.
17. http://www. gotdotnet. com/team/clr/about-security. aspx.
18. D. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, R. Chandramouli, 2001. A Proposed Standard for Role Based Access Control, ACM Transactions on Information and System Security, vol. 4, no. 3.
19. D. F. Ferraiolo and D. R. Kuhn 1992. Role Based Access Control. 15th National Computer Security Conference
20. Numerous references are available at http://csrc. nist. gov/rbac/].
21. M. Abrams, J. Heaney, O. King, L. J. LaPadula, M. Lazear, and I. Olson. 1991. A Generalized Framework for Access Control: Towards Prototyping the Orgcon Policy, In Proceedings of National Computer Security Conference, pp. 257-266.
22. Beznosov, Deng, Blakley, Burt, Barkley. 1999. A Resource Access Decision Service for CORBA-based Distributed Systems. ACSAC (Annual Computer Security Applications Conference).
23. International Standards Organization (ISO). ISO-IEC 14772-2. IDL as standardized by the Object Management Group.
24. World Wide Web Consortium (w3c). Extensible Markup Language (XML) is text format derived from SGML (ISO 8879). Available from www. w3c. org/XML.
25. Sun Microsystems Blueprints program. Pet Store version 1. 3. 1-01 available for download from http://java. sun. com/blueprints.
26. Sun Microsystems. Designing Enterprise Applications with the J2EE Platform. Chapter on Pet Store Security Architecture. available online from http://java. sun. com/blueprints
27. Object Management Group. 2001. Common Secure Interoperability version2-Chapter 24 of CORBA/IIOP specification. formal/2002-12-06. available via http://www. omg. org/technology/documents/formal/omg-secur ity. htm.
28. Chunmin Yang, Barrett R. Bryant, Carol C. Burt, Rajeev R. Raje, Andrew M. Olson, and Mikhail Auguston, 2003. Formal Methods for Quality of Service Analysis in Component-Based Distributed Computing to appear in Proceedings of IDPT 2003, the Seventh World Congress on IntegratedDesign and Process Technology.
29. Chunmin Yang, Beum-Seuk Lee, Barrett R. Bryant, Carol C. Burt, Rajeev R. Raje, Andrew M. Olson, Mikhail Auguston. 2002. Formal Specification of Non-Functional Aspects in Two-Level Grammar, Proceedings of the UML 2002 Workshop on Component-Based Software Engineering and Modeling Non-Functional Aspects (SIVOES-MONA), http://www-verimag. imag. fr/SIVOES-MONA/uniframe. pdf.