Verifiable composition of access control and application features

Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Volumn , Issue , 2005, Pages 120-129

  Song, Eunjee ^a   Reddy, Raghu ^a   France, Robert ^a   Ray, Indrakshi ^a   Georg, Geri ^a   Alexander, Roger ^a  

^a Colorado State University   (United States)

Author keywords

Modeling; RBAC; UML; Verification

Indexed keywords

MODELING; RBAC; UML; VERIFICATION;

COMPUTER PROGRAMMING LANGUAGES; COMPUTER SIMULATION; FEATURE EXTRACTION; SECURITY OF DATA;

CONTROL SYSTEM ANALYSIS;

EID: 30644467106     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1063979.1064001     Document Type: Conference Paper

References (23)

1. G. Ahn and R. Sandhu. The RSL99 Language for Role-Based Separation of Duty Constraints. In Proceedings of ACM Workshop on Role-Based Access Control, pages 43-54, 1999.
2. G. J. Ahn and M. Shin. Role-based authorization constraints specification using object constraint language. In Proc. of the 10th Int'l. Workshop on Enabling Technologies, Camebridge, MA, June 2001.
3. M. T. Chan and L. F. Kwok. Integrating security design into the software development process for e-commeree systems. Information Management and Computer Security, 9(2-3): 112-122, 2001.
4. S. Clarke. "Extending Standard UML with Model Composition Semantics". Science of Computer Programming, 44(1):71-100, July 2002.
5. D. Ferraiolo, R. Sandhu, S. Gavrila, and D. R. K. an d R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and Systems Security, 4(3), August 2001.
6. R. B. France, I. Ray, G. Georg, and S. Ghosh. An aspect-oriented approach to design modeling. IEE Proceedings - Software, Special Issue on Early Aspects: Aspect-Oriented Requirements Engineering and Architecture Design, 151(4), August 2004.
7. G. Georg, R. France, and I. Ray. An Aspect-Based Approach to Modeling Security Concerns. In Proceedings of the Workshop on Critical Systems Development with UML, Dresden. Germany, 2002.
8. G. Georg, I. Ray, and R. France. Using Aspects to Design a Secure System. In Proceedings of the Interational Conference on Engineering Complex Computing Systems (ICECCS 2002), Greenbelt, MD, December 2002. ACM Press.
9. G. Georg, R. Reddy, and R. France. Specifying cross-cutting requirements concerns. In Proceedings of the International Conference on the UML, October 2004. Springer, 2004.
10. J. Jurjens, Towards development of secure sytems using umlsec. In Proc. of the 4th Int'l. Conf. on Fundamental Approaches to Software Engineering, pages 187-200, Genova, Italy.
11. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W. G. Griswold. Getting started with AspectJ. Communications of the ACM, 44(10):59-65, Oct. 2001.
12. D.-K. Kim, I. Ray, R. France, and N. li. Modeling role-based access control using parameterized UML models. In Proceedings of the 7th Conference on Fundamental Approaches to Software Engineering (FASE 2004), 2004.
13. M. Koch, L. V. Mancini, and F. Parisi-Presicce. A graph-based formalism for RBAC. ACM Trans. Inf. Syst. Secur., 5(3):332-365, 2002.
14. T. Lodderstedt, D. Basin, and J. Doser. Secureuml: A uml-based modeling language for model-driven security. In 5th Int'l. Conf. on the Unified Modeling Language, 2002, 2002.
15. M. Nyanchama and S. Osborn. The Role Graph Model and Conflict of Interest. ACM Transactions on Information Systems Security. 2:3-33, 1999.
16. S. Osborn and Y. Guo. Modelling Users in Role-Based Access Control. In Proceedings of the 5th ACM Workshop on Role-Based Access Control, pages 31-37. Berlin, Germany, July 2000.
17. H. Ossher and P. Tarr. Using multidimensional separation of concerns to (re)shape evolving software. Communications of the ACM, 44(10):43-50. Oct. 2001.
18. I. Ray, R. France, N. Li, and G. Georg. An aspect-based approach to modeling access control concerns. Information and Software Technology. 40(9):557-633, 2004.
19. I. Ray, N. Li, R. France, and D.-K. Kim. Using UML to visualize role-based access control constraints. In Proceedings of the Symposium on Access Control Models and Technologies (SACMAT), 2004.
20. G. Straw, G. Georg, E. Song, S. Ghosh, R. France, and J. Bieman. Model composition directives. In Proceedings of the International Conference on the UML, October 2004. Springer, 2004.
21. The Object Management Group (OMG). Unified Modeling Language: Superstructure. Version 2.0, Final Adopted Specification, OMG, http://www.omg.org. August 2003.
22. J. E. Tidswell and T. Jaeger. An Access Control Model for Simplifying Constraint Expression. In Proceedings of the 7th ACM conference on Computer and communications security, pages 154-163, Athens, Greese, November 2000.
23. J. Warmer and A. Kleppe. The Object Constraint Language, Second Edition. Addison-Wesley, 2003.