Model-based run-time checking of security permissions using guarded objects

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5289 LNCS, Issue , 2008, Pages 36-50

  Jürjens, Jan ^a  

^a OPEN UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; SECURITY SYSTEMS;

CONTROL ACCESS; JAVA PROGRAM; MODEL-BASED OPC; MODEL-BASED SPECIFICATIONS; OBJECT-ORIENTED SYSTEM; RUN-TIME CHECKING; RUN-TIME CHECKS; SECURITY POLICY;

COMPUTER SOFTWARE;

EID: 57049136634     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-89247-2_3     Document Type: Conference Paper

References (11)

1. Giambiagi, P., Dam, M.: On the secure implementation of security protocols. Sci. Comput. Program. 50(1-3), 73-99 (2004)
2. Gong, L.: Inside Java 2 Platform Security - Architecture, API Design, and Implementation. Addison-Wesley, Reading (1999)
3. Havelund, K., Rosu, G.: An overview of the runtime verification tool Java PathExplorer. Formal Methods in System Design 24(2), 189-215 (2004)
4. Jürjens, J., Schreck, J.: Automated analysis of permission-based security using UMLsec. In: Fiadeiro, J.L., Inverardi, P. (eds.) FASE 2008. LNCS, vol. 4961. Springer, Heidelberg (2008)
5. Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2004)
6. Jürjens, J.: Sound methods and effective tools for model-based security engineering with UML. In: ICSE. IEEE, Los Alamitos (2005)
7. Jürjens, J., Yu, Y.: Tools for model-based security engineering: Models vs.code. In: 22nd IEEE/ACM Int. Conf. Autom. Softw. Eng. ACM, New York (2007)
8. Kim, M., Viswanathan, M., Kannan, S., Lee, I., Sokolsky, O.: Java-MaC: A run-time assurance approach for Java programs. Formal Methods in System Design 24(2), 129-155 (2004)
9. Saltzer, J., Schroeder, M.: The protection of information in computer systems. Proceedings of the IEEE 63(9), 1278-1308 (1975)
10. Sasturkar, A., Yang, P., Stoller, S.D., Ramakrishnan, C.R.: Policy analysis for administrative Role Based Access Control. In: CSFW, pp. 124-138. IEEE, Los Alamitos (2006)
11. Security verification tool (2001-2008), http://computing-research.open. ac.uk/jj/umlsectool