A verifiable modeling approach to configurable role-based access control

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6013 LNCS, Issue , 2010, Pages 188-202

  Kim, Dae Kyoo ^a   Lu, Lunjin ^a   Kim, Sangsig ^a  

^a Oakland University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MODELS; COMPOSITION METHOD; CONFIGURABLE; DESIGN PRINCIPLES; ECONOMIC BENEFITS; ENTERPRISE SYSTEM; FEATURE LEVEL; FEATURE MODELING; MODELING APPROACH; ROLE-BASED ACCESS CONTROL; UML MODELING;

COMPUTER SOFTWARE; FEATURE EXTRACTION; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 77951260227     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-12029-9_14     Document Type: Conference Paper

References (22)

1. Ferraiolo, D., Sandhu, R., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST Standard for Role-Based Access Control. ACM Trans. on Information and Systems Security 4(3) (2001)
2. Bertino, E., Bonatti, P., Ferrari, E.: TRBAC: A Temporal Role-based Access Control Model. ACM Trans. on Information and Systems Security 4(3), 191-223 (2001)
3. Ferraiolo, D., Kuhn, D.R., Chandramouli, R.: Role-Based Access Control, second edition. Artech House (2007)
4. Ramaswamy, C., Sandhu, R.: Role-Based Access Control Features in Commercial Database Management Systems. In: Proc. of the 21st NIST-NCSC Conference (1998)
5. Kang, K., Cohen, S., Hess, J., Nowak, W., Peterson, S.: Feature-Oriented Domain Analysis (FODA) Feasibility Study. Technical Report CMU/SEI-90TR-21 (1990)
6. The Object Management Group (OMG): Unified Modeling Language: Superstructure. Version 2.1.2 formal/07-11-102, OMG (November 2007), http://www.omg.org
7. Shin, M., Ahn, G.: UML-Based Representation of Role-Based Access Control. In: Proc. of IEEE Int. Workshop on Enabling Technologies, pp. 195-200 (2000)
8. Warmer, J., Kleppe, A.: The Object Constraint Language Second Edition: Getting Your Models Ready for MDA. Addison Wesley, Reading (2003)
9. Kim, D., Ray, I., France, R., Li, N.: Modeling Role-Based Access Control Using Parameterized UML Models. In: Wermelinger, M., Margaria-Steffen, T. (eds.) FASE 2004. LNCS, vol. 2984, pp. 180-193. Springer, Heidelberg (2004)
10. Priebe, T., Fernandez, E., Mehlau, J., Pernul, G.: A Pattern System for Access Control. In: Proc. of Conf. on Data and Application Security, pp. 22-28 (2004)
11. Gamma, E., Helm, R., Johnson, R., Vlissides, J.: Design Patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, Reading (1995)
12. Jurjens, J.: UMLsec: Extending UML for Secure Systems Development. In: Proc. of the 5th Int. Conf. on the UML, Dresden, Germany, pp. 412-425 (2002)
13. Harrison, M., Ruzzo, W., Ullman, J.: Protection in Operating Systems. Communications of the ACM 19(8), 461-471 (1976)
14. Lodderstedt, T., Basin, D.A., Doser, J.: SecureUML: A UML-Based Modeling Language for Model-Driven Security. In: Proc. of the 5th Int. Conf. on the UML, Dresden, Germany, pp. 426-441 (2002)
15. Doan, T., Demurjian, S., Phillips, C., Ting, T.: Research Directions in Data and Applications Security XVIII. In: Proc. of the 18th IFIP TC11/WG 11.3 Annual Conf. on Data and Applications Security, Catalonia, Spain, pp. 25-28 (2004)
16. Clarke, S., Walker, R.: Composition Patterns: An Approach to Designing Reusable Aspects. In: Proc. of Int. Conf. on Software Engineering, pp. 5-14 (2001)
17. Reddy, R., Solberg, A., France, R., Ghosh, S.: Composing Sequence Models using Tags. In: Proc. of MoDELS Workshop on Aspect Oriented Modeling (2006)
18. Song, E., Reddy, R., France, R., Ray, I., Georg, G., Alexander, R.: Verifiable Composition of Access Control and Application Features. In: Proc. of the 10th ACM Symp. on Access Control Models and Technologies, Stockholm, Sweden, pp. 120-129 (2005)
19. Straw, G., Georg, G., Song, E., Ghosh, S., France, R., Bieman, J.: Model Composition Directives. In: Proc. of the 7th Int. Conf. on the UML, Lisbon, Portugal (2004)
20. Brady, A.F.: A Taxonomy of Inheritance Semantics. In: Proc. of the 7th Int. Workshop on Software Specification and Design, Redondo Beach, California, pp. 194-203 (1993)
21. Störrle, H.: Semantics of interactions in UML 2.0. In: Proceedings of IEEE Symposium on Human Centric Computing Languages and Environments
22. Chandramouli, R.: Application of XML Tools for Enterprise-Wide RBAC Implementation Tasks. In: Proc. of Workshop on Role-based Access Control (2000)