Constraint based role based access control in the SECTET-framework: A model-driven approach

Journal of Computer Security

Volumn 16, Issue 2, 2008, Pages 223-260

  Alam, Muhammad ^a   Hafner, Michael ^a   Breu, Ruth ^a  

^a UNIVERSITY OF INNSBRUCK   (Austria)

Author keywords

Domain specific language; Model driven architecture; Model driven engineering; Service oriented architecture

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER PROGRAMMING LANGUAGES; COMPUTER SIMULATION; CONSTRAINT THEORY; HIERARCHICAL SYSTEMS; WEB SERVICES;

DOMAIN SPECIFIC LANGUAGE; MODEL DRIVEN ARCHITECTURE; MODEL DRIVEN ENGINEERING; SERVICE ORIENTED ARCHITECTURE;

ACCESS CONTROL;

EID: 38349100724     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/JCS-2008-16206     Document Type: Conference Paper

References (46)

1. M. Alam, M. Hafner and R. Breu, Model-driven security for Web services (MDS4WS), in: INMIC 2004.
2. M. Alam, M. Hafner and R. Breu, Modeling authorization in an soa based application scenario. in: IASTED Confi on Software Engineering, 2006, pp. 79-84.
3. M. Alam, M. Hafner, R. Breu and S. Unterthiner, A framework for modeling restricted delegation in service oriented architecture, in: TrustBus, 2006, pp. 142-151.
4. AndroMDA v3.0M3 available at. http://andromda.org/.
5. K. Balasubramanian, A. Gokhale, G. Karsai, J. Sztipanovits and S. Neema, Developing applications using model-driven design environments, Computer 39(2) (2006), 33.
6. D. Basin, H. Kuruma, S. Nakajima and B. Wolff, The z specification language and the proof environment isabelle/hol-z (in Japanese), Computer Software - Journal of the Japanese Society for Software Science and Technology 24 (2007), 21-26.
7. S. Brahe and K. Østerbye, Business process modeling: Defining domain specific modeling languages by use of uml profiles, in: ECMDA-FA, 2006, pp. 241-255.
8. R. Breu, M. Breu, M. Hafner and A. Nowak, Web service engineering - advancing a new software engineering discipline, in: ICWE, 2005, pp. 8-18.
9. R. Breu, M. Hafner, B. Weber and A. Nowak, Model driven security for inter-organizational workflows in. e-government, in: TCGOV, 2005, pp. 122-133.
10. R. Breu and G. Popp, Actor-centric modeling of user rights, in: FASE, 2004, pp. 165-179.
11. D. Gue Park et al., A flexible role-based delegation model using characteristics of permissions, DEXA 2005, LNCS, Vol. 3588, 2005, pp. 310-323.
12. E. Bertino et al., TRBAC: A temporal role-based access control model, ACM Transactions on Information and System Security (TISSEC) 4 (3) (2001).
13. M. Hafner, M. Alam and R. Breu, Towards a mof/qvt-based domain architecture for model driven security, in: MoDELS, 2006, pp. 275-290.
14. M. Hafner, M. Breu, R. Breu and A. Nowak, Modelling inter-organizational workflow security in a peer-to-peer environment, in: ICWS'05: Proceedings of the IEEE International Conference on Web Services (ICWS'05), Washington, DC, USA, IEEE Computer Society, 2005, pp. 533-540.
15. http://www.eclipse.org/emf/.
16. J. B.D. Joshi et al., A generalized temporal role-based access control model, IEEE Transactions On Knowledge And Data Engineering 17 (1) (2005).
17. J. Jürjens, Secure Systems Development with UML, Springer-Verlag, 2003. ISBN: 3540007016.
18. http://hissa.nist.gov/rbac/paper/node5.html.
19. H. Lee, Y. Lee and B. Noh, A new role-based delegation model using sub-role hierarchies, in: ISCIS, 2003, pp. 811-818.
20. T. Lodderstedt, D.A. Basin and J. Doser, Secureuml: A UML-based modeling language for model-driven security, in: UML - The Unified Modeling Language, 5th International Conference, Dresden, Germany, 2002, J.-M. Jézéquel, H. Hussmann and S. Cook, eds, LNCS, Vol. 2460, Springer-Verlag, 2002, pp. 426-441.
21. http://www.magicdraw.com/.
22. D. Marco, Building and Managing the Meta Data Repository: A Full Life-Cycle Guide, John Wiley & Sons, Inc., New York, NY, USA, 2000.
23. M. Alam, Model-driven security engineering for the realization of dynamic security requirements in collaborative systems, in: PhD Symposium of IEEE/ACM Models 2006, Genoa, Italy, LNCS, Vol. 4364, 2006, pp. 278-287.
24. M. Alam, R. Breu and M. Hafner, Modeling permissions in a (U/X)ML World, in: ARES 2006, IEE Computer Society, Washington, DC, 2006, pp. 685-692. ISBN: 0-7695-2567-9.
25. Model Driven Architecture, http://www.omg.org/mda.
26. Meta Object Facility: OMG adapted specification available at http://www.omg.org/docs/ptc/04-.10-15.pdf.
27. M. Hafner, R. Breu, B. Agreiter and A. Nowak, SECTET - An extensible framework for the realization of secure inter-organizational workflows, Journal of Internet Research 24 (2006), 491-506.
28. M. Hafner, R. Breu and M. Breu, A Security architecture for inter-organizational workflows: Putting WS security standards together, in: Proc. 7th International Conference on Enterprise Information Systems (ICEIS 2005), 27-28 May 2005, Miami, USA, INSTICC, pp. 128-135. ISBN: 972-8865-19-8.
29. M. Schumacher, Security Engineering with Patterns, LNCS, Vol. 2754, Springer-Verlag, New York, 2003. ISBN: 3-540-40731-6.
30. SUN MicroSystems, Java metadata interface, Misc, 2002.
31. http://mdr.netbeans.org/.
32. OAW 4 EMF Example available at http://www.eclipse.org/gmt/oaw/doc/30_e. mfExam.ple.pdf.
33. OAW XPAND Language available at http://www.ecl.ipse.org/gmt/oaw/doc/ r20_xPandReference.pdf.
34. UML 2.0 OCL Specification, http://www.omg.org/docs/ptc/03-10-14.pdf.
35. Object Management Group, http://www.omg.org.
36. T. Parr, The Complete ANTLR Reference Guide: Building Domain-Specific Languages, The Pragmatic Bookshelf, Raleigh, 2007.
37. Query View Transformation: OMG Adapted Specification available at http://www.omg.org/docs/ptc/05-11-01.pdf.
38. R. France and B. Rumpe, Domain specific modeling, Editorial of Software System Model Journal 4 (2005), 13.
39. Role Based Access Control (RBAC), avialable at csrc.nist.gov/rbac/.
40. SAML 2.0 Specification, available at http://www.oasis-open.org/ committees/tc_home.php?wg_abbrev-security.
41. www.sectet.org (will be on air by the end of May 2006).
42. SECTETPL: A predicative language for the specification of access rights, available at http://qe-informatik.uibk.ac.at/~muhammad/TechnicalReportSECTETPL. pdf.
43. Web Service Description Language (WSDL), available at http://www.w3.org/TR/wsdl.
44. WSDL First, July 22, 2003, http://webservices.xml.eom/pub/a/ws/2003/07/ 22/wsdlfirst.html.
45. XACML 2.0 Specification Set, available at http://www.oasis-open.org/ committees/tc_home. php?wg_abbrev=xacml.
46. XML Path Language (XPath) specifications, available at http://www.w3.org/TR/xpath.