Formal access control analysis in the software development process

Proceedings of the ACM Workshop on Formal Methods in Security Engineering

Volumn , Issue , 2003, Pages 67-76

  Koch, Manuel ^a   Parisi Presicce, Francesco ^b,c  

^a FREIE UNIVERSITÄT BERLIN   (Germany)

^b GEORGE MASON UNIVERSITY   (United States)

^c SAPIENZA UNIVERSITY OF ROME   (Italy)

Author keywords

Access control; Graph transformation systems; Methodology

Indexed keywords

GRAPH THEORY; MATHEMATICAL MODELS; MATHEMATICAL TRANSFORMATIONS; REQUIREMENTS ENGINEERING; SECURITY OF DATA; SEMANTICS; SOFTWARE ENGINEERING; SPECIFICATIONS;

CORBA; FORMAL ACCESS CONTROL; GRAPH TRANSFORMATION SYSTEMS; UNIFIED MODELING LANGUAGE (UML);

OBJECT ORIENTED PROGRAMMING;

EID: 2642558059     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1035429.1035437     Document Type: Conference Paper

References (21)

1. G. Brose. Raccoon - An infrastructure for managing access control in CORBA. In Proc. Int. Conference on Distributed Applications and Interoperable Systems (DAIS). Kluwer, 2001.
2. G. Brose. Manageable Access Control for CORBA. Journal of Computer Security, 4:301-337, 2002.
3. G. Brose, M. Koch, and K.-P.Löhr. Integrating Access Control Design into the Software Development Process. In Proc. of 6th Internat. Conf. on Integrated Design and Process Technology (IDPT), 2002.
4. A. Corradini, H. Ehrig, M. Löwe, and J. Padberg. The category of typed graph grammars and their adjunction with categories of derivations. In 5th Int. Workshop on Graph Grammars and their Application to Computer Science, number 1073 in Lect. Notes in Comp. Sci., pages 56-74. Springer, 1996.
5. P. T. Devanbu and S. Stubblebine. Software engineering for security: A roadmap. In A. Finkelstein, editor, The Future of Software Engineering. ACM Press, 2000.
6. H. Ehrig, R. Heckel, M. Korff, M. Löwe, L. Ribeiro, A. Wagner, and A. Corradini. Algebraic Approaches to Graph Transformation Part II: Single Pushout Approach and Comparison with Double Pushout Approach. In Rozenberg [19], 1997.
7. P. Epstein and R. Sandhu. Towards A UML Based Approach to Role Engineering. In Proc. of ACM RBAC, 1999.
8. R. Heckel and A. Wagner. Ensuring consistency of conditional graph grammars - a constructive approach. In Proc. SEGRAGRA'95, no. 2. Electronic Notes of TCS, 1995. http://www.elsevier.nl/locate/entcs/volume2.html.
9. J. Jürjens. UMLsec: Extending UML for Secure Systems Development. In Proc. of UML 2002, number 2460 in LNCS, pages 412-425. Springer, 2002.
10. M. Koch, L. Mancini, F. Parisi-Presicce. Conflict Detection and Resolution in Access Control Specifications. In M.Nielsen and U.Engberg, editors, Proc. of Found. of Soft. Sci. and Comp. Structures (FoSSaCS 2002), Lect. Notes in Comp. Sci., pages 223-237. Springer, 2002.
11. M. Koch, L. V. Mancini, and F. Parisi-Presicce. On the Specification and Evolution of Access Control Policies. In S. Osborn, editor, Proc. 6th ACM Symp. on Access Control Models and Technologies, pages 121-130. ACM, May 2001.
12. M. Koch, L. V. Mancini, and F. Parisi-Presicce. A Graph Based Formalism for RBAC. ACM Transactions on Information and System Security (TISSEC), 5(3):332-365, August 2002.
13. M. Koch and F. Parisi-Presicce. Access Control Policy Specification in UML. In Proc. of UML2002 Workshop on Critical Systems Development with UML, Technical University of Munich, TUM-I0208, 63-78, Sept 2002.
14. B. W. Lampson. Protection. ACM Operating Systems Rev., 8(1):18-24, Jan. 1974.
15. T. Lodderstedt, D. Basin, and J. Doser. SecureUML:A UML-Based Modeling Language for Model-Driven Security. In Proc. of UML 2002, number 2460 in LNCS, pages 426-441. Springer, 2002
16. B. Nuseibeh and S. Easterbrook. Requirements engineering: A roadmap. In A. Finkelstein, editor, The Future of Software Engineering. ACM Press, 2000.
17. OMG. OMG Unified Modeling Language Specification, V.1.4, 2001.
18. OMG. Model driven architecture, 2003. http://www.omg.org/mda/.
19. G. Rozenberg, editor. Handbook of Graph Grammars and Computing by Graph Transformations. Vol. I: Foundations. World Scientific, 1997.
20. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman, Role-based access control models. IEEE Computer, 29(2):38-47, Feb. 1996.
21. I. Sommerville. Software Engineering, 6th edition. Addison-Wesley, 2001.