Aspect-based enforcement of formal delegation policies

Proceedings 2008 3rd International Conference on Risks and Security of Internet and Systems, CRiSIS 2008

Volumn , Issue , 2008, Pages 9-17

  Kallel, Slim ^a   Mezini, Mira ^a   Charfi, Anis ^b   Jmaiel, Mohamed ^c  

^a DARMSTADT UNIVERSITY OF TECHNOLOGY   (Germany)

^b SAP RESEARCH   (Germany)

^c UNIVERSITY OF SFAX   (Tunisia)

Author keywords

Access control; Aspect oriented programming; Delegation; Formal methods; RBAC

Indexed keywords

FORMAL METHODS; INTERNET; SECURITY SYSTEMS; SPECIFICATIONS; TEMPORAL LOGIC; THEOREM PROVING;

ACCESS-CONTROL SYSTEMS; ASPECT-ORIENTED; ASPECT-ORIENTED PROGRAMMING; DELEGATION; FORMAL SPECIFICATIONS; RBAC; ROLE-BASED ACCESS CONTROLS; RUN-TIME; SECURITY APPROACHES; Z NOTATIONS;

ACCESS CONTROL;

EID: 63249090772     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CRISIS.2008.4757459     Document Type: Conference Paper

References (17)

1. E. Barka and A. Aly. Implementation of Role-Based Delegation Model/Flat Roles (RBDM0). In Proc. of the 6th Annual UAE University Research Conference, 2006.
2. E. Barka and R. Sandhu. A role-based delegation model and some extensions. In Proc. of ACSAC. 2000.
3. D. Basin, J. Doser, and T. Lodderstedt. Model driven security: From UML models to access control infrastructures. ACM Trans. Softw. Eng. Methodol., 15(1):39-91, 2006.
4. K. Chen. Using Dynamic Aspects for Delegating Fine- Grained Access Rights. In Proc. of APSEC. IEEE, 2005.
5. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Trans. Inf. Syst. Secur., 4(3), 2001.
6. J. Jürjens. UMLsec: Extending UML for Secure Systems Development. In Proc. of UML. Springer, 2002.
7. S. Kallel, A. Charfi, M. Mezini, M. Jmaiel, and K. Klose. From formal access control policies to runtime enforcement aspects. In Proc. of Int. ESSoS Symposium, to appear. Springer, February 2009.
8. G. Kiczales, J. Lamping, A. Mendhekar, C. Maeda, C. V. Lopes, J.-M. Loingtier, and J. Irwin. Aspect-Oriented Programming. In Proc. of ECOOP, pages 220-242, 1997.
9. Z. Manna and A. Pnueli. The Temporal Logic of Reactive and Concurrent Systems. Springer, 1992.
10. I. Meisels and M. Saaltink. The Z/EVES Reference Manual (for Version 1.5). Reference Manual, ORA Canada, 1997.
11. K. Ostermann, M. Mezini, and C. Bockisch. Expressive Pointcuts for Increased Modularity. In Proc. of ECOOP '05.
12. A. Regayeg, S. Kallel, A. H. Kacem, and M. Jmaiel. For- MAAD Method: An Experimental Design for Air Traffic Control. ITSSA, 1(4):327-334, 2006.
13. E. Shapiro and Sterling. The Art of PROLOG: Advanced Programming Techniques. The MIT Press, 1994.
14. K. Sohr, M. Drouineaud, and G.-J. Ahn. Formal specification of role-based security policies for clinical information systems. In Proc. of ACM SAC, pages 332-339. ACM, 2005.
15. M. Spivey. The Z notation: a reference manual, Second Edition. Prentice Hall International Ltd., 1992.
16. L. Zhang, G.-J. Ahn, and B.-T. Chu. A rule-based framework for role based delegation. In Proc. of SACMAT. ACM, 2001.
17. X. Zhang, S. Oh, and R. Sandhu. PBDM: a flexible delegation model in RBAC. In Proc. of SACMAT. ACM, 2003.