A UML profile for role-based access control

SIN'09 - Proceedings of the 2nd International Conference on Security of Information and Networks

Volumn , Issue , 2009, Pages 83-92

  Cirit, Çaǧdaş ^a   Buzluca, Feza ^b  

^a National Research Institute of Electronics and Cryptology   (Turkey)

^b ISTANBUL TECHNICAL UNIVERSITY   (Turkey)

Author keywords

Model driven architecture; Model validation; Object constraint language; Role based access control; Security engineering; Stereotype; Tagged value; Unified modeling language profile

Indexed keywords

MODEL DRIVEN ARCHITECTURE; MODEL VALIDATION; OBJECT CONSTRAINT LANGUAGE; ROLE-BASED ACCESS CONTROL; SECURITY ENGINEERING; STEREOTYPE; TAGGED VALUE;

FLOW CONTROL; FREQUENCY HOPPING; INTEGRATION; LINGUISTICS; MAINTAINABILITY; MARKUP LANGUAGES; SECURITY SYSTEMS; SPECIFICATIONS; UNIFIED MODELING LANGUAGE;

ACCESS CONTROL;

EID: 70350637633     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1626195.1626217     Document Type: Conference Paper

References (24)

1. th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2001, 157-162.
2. American National Standard for Information Technology, 2004. Role Based Access Control, ANSI INCITS 359-2004.
3. Basin, D., Doser, J., and Lodderstedt, T. 2006. Model Driven Security: From UML Models to Access Control Infrastructures. ACM Transactions on Software Engineering and Methodology, Vol.15, No.1, 2006, 39-91.
4. Bell, D.E., and LaPadula, L.J. 1976. Secure Computer System: Unified Exposition and Multics Interpretation. MTR-2997 Rev. 1, Bedford, MA: The Mitre Corporation, March.
5. Brewer, D., and Nash, M. 1989. The Chinese Wall Security Policy. In Proceedings of the 1989 IEEE Symposium on Security and Privacy. IEEE C.S. Press, 206-214.
6. Cirit, C., and Buzluca, F. 2009. A UML Profile for RBAC, in XMI format = http://www.buzluca.info/rbac/RBAC.profile.xmi
7. Clark, D. D., and Wilson, D. R. 1987. A Comparison of Commercial and Military Computer Security Policies. In Proceedings of the 1987 IEEE Symposium on Research in Security and Privacy. IEEE Press, 184-194.
8. Ferraiolo, D., and Kuhn, R. 1992. Role-Based Access Control. In Proceedings of the 15th NIST-NSA National Computer Security Conference, 554-563.
9. Ferraiolo, D., Kuhn, R., and Chandramouli, R. 2007. Role-Based Access Control, Second Edition. Artech House, Information Security and Privacy Series.
10. Ferraiolo, D., Kuhn, R., and Sandhu, R. 2007. RBAC Standard Rationale: Comments on "A Critique of the ANSI Standard on Role-Based Access Control". IEEE Security and Privacy, Vol. 5, No. 6, Nov./Dec. 2007, 51-53.
11. Fuentes-Fernández, L., and Vallecillo-Moreno, A. 2004. An Introduction to UML Profiles. UPGRADE, European Journal for the Informatics Professional Vol.5, No.2, 5-13.
12. th International Conference on the Unified Modeling Languages, October 2002, 412-425.
13. Jin, X. 2006. Applying Model Driven Architecture Approach to Model Role Based Access Control System. Thesis (M.Sc.) - University of Ottawa, 2006.
14. Object Management Group, 2003. MDA Guide Version 1.0.1 (Jun. 2003). http://www.omg.org/cgibin/ doc?omg/03-06-01
15. Object Management Group, 2006. Meta Object Facility (MOF) Core Specification, OMG Available Specification, Ver. 2.0 (Jan. 2006). http://www.omg.org/spec/MOF/2.0/
16. Object Management Group, 2007. MOF 2.0/XMI Mapping, OMG Available Specification, Version 2.1.1. (Dec. 2007) http://www.omg.org/cgi-bin/doc?formal/ 2007-12-01
17. Object Management Group, 2006. Object Constraint Language, OMG Available Specification, Version 2.0 (May. 2006). http://www.omg.org/spec/OCL/2.0/
18. Object Management Group, 2009. OMG Unified Modeling Language (OMG UML), Superstructure, Version 2.2 (Feb. 2009). http://www.omg.org/cgi-bin/doc?formal/ 09-02-02
19. Object Management Group, 2002. UML Profile for CORBA Specification, Version 1.0 (Apr. 2002). http://www.omg.org/cgi-bin/doc?formal/02-04-01
20. Object Management Group, 2005. UML Testing Profile, Version 1.0 (Jul. 2005). http://www.omg.org/cgibin/ doc?formal/05-07-07
21. Organization for the Advancement of Structured Information Standards, 2005. Core: eXtensible Access Control Markup Language (XACML) Version 2.0 (Feb. 2005). http://docs.oasis-open.org/xacml/2.0/access-control-xacml-2.0-core-spec- os.pdf
22. Ray, I., Li, N., France, R., and Kim, D. 2004. Using UML to Visualize Role-Based Access Control Constraints. In Proceedings of the 9th ACM Symposium on Access Control Models and Technologies, 2004, 115-124.
23. Shin, M.E., and Ahn, G. 2000. UML-Based Representation of Role-Based Access Control. In Proceedings of the 9th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, 2000, 195-200.
24. Wang, H., Zhang, Y., Cao, J., and Yang, J. 2004. Specifying Role-Based Access Constraints with Object Constraint Language. APWeb 2004, LNCS Vol. 3007, Springer Berlin / Heidelberg, 687-696.