AuthUML: A three-phased framework to analyze access control specifications in use cases

Proceedings of the ACM Workshop on Formal Methods in Security Engineering

Volumn , Issue , 2003, Pages 77-86

  Alghathbar, Khaled ^a,b   Wijesekera, Duminda ^c  

^a GEORGE MASON UNIVERSITY   (United States)

^b KING SAUD UNIVERSITY   (Saudi Arabia)

^c George Mason University   (United States)

Author keywords

Access control policies; Security engineering; Semi formal methods; Use cases

Indexed keywords

COMPUTATIONAL COMPLEXITY; LOGIC PROGRAMMING; REQUIREMENTS ENGINEERING; SECURITY OF DATA; SPECIFICATIONS;

ACCESS CONTROL POLICIES; SECURITY ENGINEERING; SEMI-FORMAL METHODS; USE CASES;

SOFTWARE ENGINEERING;

EID: 2642582574     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. K. Alghathbar, D. Wijesekera. Modeling Dynamic Role-based Access Constraints using UML. In proc. of the 1st International Conference on Software Engineering Research & Applications (ICSERA'03), San Francisco, CA. June 2003
2. K. Apt, H. Blair, and A. Walker. Towards a theory of declarative knowledge. In J. Minker, editor, Foundations of deductive databases, pages 89-148. Morgan Kaufmann, San Mateo, 1988.
3. G. Booch, J. Rumbaugh, and I. Jacobson. The Unified Modeling Language User Guide. Addison-Wesley, Reading, MA, 1999.
4. G. Brose, M. Koch, K.-P. Löhr. Integrating Access Control Design into the Software Development Process. In the Proceedings of the sixth biennial world conference on the Integrated Design and Process Technology (IDPT), Pasadena, CA. June 2002.
5. G. Brose. A typed access control model for CORBA. In F. Cuppens, Y. Deswarte, D. Gollmann, and M. Weidner, editors, Proc. European Symposium on Research in Computer Security (ESORICS), LNCS 1895, pages 88-105. Springer, 2000.
6. D. D. Clark, D. R. Wilson. A Comparison of Commercial and Military Computer Security Policies. IEEE Symposium on Security and Privacy 1987: 184-19.
7. P. T. Devanbu and S. Stubblebine. Software engineering for security:A roadmap. In A. Finkelstein, editor, The Future of Software Engineering. ACM Press, 2000.
8. John E. Dobson, John A. McDermid: A Framework for Expressing Models of Security Policy. IEEE Symposium on Security and Privacy 1989: 229-241
9. E. Fernandez-Medina, A. Martinez, C. Medina, And M. Piattini. Integrating Multilevel Security in the Database Design Process. In the Proceedings of the sixth biennial world conference on the Integrated Design and Process Technology (IDPT), Pasadena, CA. June 2002.
10. D. Gabbay and A. Hunter, "Making Inconsistency Respectable: A Logical Framework for Inconsistency in Reasoning, Phase 1 - A Position Paper", Proceedings of Fundamentals of Artificial Intelligence Research '91, 19-32, Springer-Verlag.
11. D. Gabbay and A. Hunter, "Making Inconsistency Respectable: A Logical Framework for Inconsistency in Reasoning, Phase2", In Symbolic and Quantitative Approaches to Reasoning and Uncertainty, 129-136, LNCS, Springer-Verlag, 1992.
12. M. Gelfond, V. Lifschitz. 1988. The stable model semantics for logic programming. In Proceedings, 5th International Conference and Symposium on Logic Programming. Seattle, Wash. pp. 1070-1080.
13. S. Jajodia, Pierangela Samarati, Maria Luisa Sapino, V. S. Subrahmanian, "Flexible support for multiple access control policies," ACM Trans. on Database Systems, Vol. 26, No. 2, June 2001, pages 214-260.
14. J. Jurjens. Towards development of secure systems using UMLsec. In H. Hussmann, editor, Fundamental Approaches to Software Engineering, 4th Internacional Conference, Proceedings, LNCS, pages 187-200. Springer, 2001.
15. T. Lodderstedt, D. Basin, J. Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. In the proceedings of the 5th International Conference on the Unified Modeling Language, Dresden, Germany. Pages 426-441. Springer, October 2002
16. B. Nuseibeh, S. Easterbrook and A. Russo, "Making Respectable in Software Development", Journal of Systems and Software, 56(11), November 2001, Elsevier Science Publishers
17. Object Management Group. OMG Unified Modeling Language Specification, Version 1.4, 2001 http://www.omg.org/technology/documents/formal/uml.htm.
18. R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E. Youman. Role-based access control models. IEEE Computer, 29(2):3"7, 1996.
19. Shane Sendall, Alfred Strohmeier: From Use Cases to System Operation Specifications. UML 2000: 1-15.
20. S. Sendall. Specifying Reactive System Behavior, Ph.D. thesis, Swiss Federal Institute of Technology - Lausanne (EPFL), May 2002
21. J. Warmer, a. Kleppe. The Object Constraint Language: Precise Modeling with UML. Addison Wesley, 1999.