Property verification for generic access control models

Proceedings of The 5th International Conference on Embedded and Ubiquitous Computing, EUC 2008

Volumn 2, Issue , 2008, Pages 243-250

  Hu, Vincent C ^a   Kuhn, D Richard ^a   Xie, Tao ^b  

^a NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

^b NORTH CAROLINA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MODELS; AUTOMATED GENERATIONS; CONTROL PROPERTIES; COVERING ARRAYS; GENERAL APPROACHES; MODEL CHECKERS; PROPERTY VERIFICATIONS; SECURITY PROPERTIES; SYSTEM IMPLEMENTATIONS; TEST CASE; WIDE GAPS;

LINGUISTICS; MODEL CHECKING; SECURITY SYSTEMS; SPECIFICATION LANGUAGES; UBIQUITOUS COMPUTING;

ACCESS CONTROL;

EID: 63149102166     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EUC.2008.22     Document Type: Conference Paper

References (15)

1. NuSMV: http://nusmv.irst.itc.it/
2. D. Ferraiolo and R. Kuhn. Role based access control. In Proc. 15th NIST-NCSC National Computer Security Conference, pp. 554-563, 1992.
3. D. E. Bell and L. J. LaPadula. Secure computer systems: Mathematical foundations, 1973. MITRE Corporation.
4. National Computer Security Center. Integrity in Automated information System. Technical Report 79-91, Library No. S237,254, Sept. 1991.
5. D. F. C. Brewer and M. J. Nash. The Chinese wall security policy. In Proc. IEEE Symposium on Security and Privacy, pp. 206-214, 1989.
6. Workflow Management Coalition. Workflow Management Coalition Terminology & Glossary. http://www.wfmc.org/ Documentation number WFMC-TC-1011, February 1999.
7. P. Ammann and P.E. Black. Abstracting Formal Specifications to Generate Software Tests via Model Checking. In Proc. Digital Avionics Systems Conference, pp. 10.A.6-1 - 10.A.6-10, 1999.
8. D.R. Kuhn, D.R. Wallace, and A.J. Gallo, Jr. Software Fault Interactions and Implications for Software Testing. IEEE Trans. on Software Engineering, Vol. 30, , June 2004.
9. D. R. Kuhn and V. Okun. Pseudo-exhaustive Testing For Software, In Proc. 30th NASA/IEEE Software Engineering Workshop, April 25-27, 2006.
10. Y. Lei, R. et al. Efficient Test Generation for Multi-Way Combinatorial Testing, Software Testing, Verification, and Reliability. Wiley InterScience, , October 2007.
11. http://csrc.nist.gov/groups/SNS/acts/index.html
12. Pfleeger C. P. Security In Computing Second Edition, by Prentice-Hall PTR, 1997.
13. N. Zhang, M. D. Ryan, and D. Guelev. Evaluating Access Control Policies Through Model Checking. In Proc. Information Security Conference, pp. 446-460, 2005.
14. S. Kikuchi, S. Tsuchiya, M. Adachi, and T. Katsuyama. Policy Verification and Validation Framework Based on Model Checking Approach. In Proc. International Conference on Autonomic Computing, pp. 1-9, 2007.
15. A. Schaad, V. Lotz, and K. Sohr. A model-checking approach to analysing organisational controls in a loan origination process. In Proc ACM Symposium on Access Control Models and Technologies, pp. 139-149, 2006.