XacT: A bridge between resource management and access control in multi-layered applications

SESS 2005 - Proceedings of the 2005 Workshop on Software Engineering for Secure Systems - Building Trustworthy Applications

Volumn , Issue , 2005, Pages

  Rits, Maarten ^a   De Boe, Benjamin ^a   Schaad, Andreas ^a  

^a SAP RESEARCH   (France)

Author keywords

Aspect oriented programming; Role based access control (RBAC); Workflow security

Indexed keywords

APPLICATION PROGRAMS; ASPECT ORIENTED PROGRAMMING; NATURAL RESOURCES MANAGEMENT; RESOURCE ALLOCATION; SOFTWARE ENGINEERING;

ACCESS CONTROL ENFORCEMENTS; CONSISTENT ACCESS; CONTROL INFORMATION; DATABASE LAYER; DIFFERENT LAYERS; RESOURCE MANAGEMENT; ROLE-BASED ACCESS CONTROL; WORKFLOW SECURITY;

ACCESS CONTROL;

EID: 83755177144     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. Chuck Cavaness and Brian Keeton, Special Edition Using Enterprise JavaBeans 2.0, Chapter 14: Security Design and Management, Que Publishing, February, 2002.
2. Damianou, N. A Policy Framework for Management of Distributed Systems. PhD thesis, Imperial College, UK, 2002.
3. B. De Win, Engineering application-level security through aspect-oriented software development, Ph.D. Thesis, Department of Computer Science, K.U. Leuven, Leuven, Belgium, March, 2004.
4. Gregor Kiczales, Erik Hilsdale, Jim Hugunin, Mik Kersten, Jeffrey Palm and William G. Griswold. An Overview of AspectJ. In Proc. of ECOOP, Springer-Verlag (2001).
5. Kiczales, G., Lamping, J., Mendhekar, A., Maeda, C., Videira Lopes, C., Loingtier, J.-M., and Irwin, J. Aspect-Oriented Programming. In Proc. of ECOOP, Springer-Verlag (1997).
6. KPMG, Fraud Survey Reports 1996-2002, KPMG International Canada, 2002.
7. Brian A. LaMacchia, Sebastian Lange, Matthew Lyons, Rudi Martin, and Kevin T. Price, .NET Framework Security, Pearson Education, Indianapolis, 2002.
8. Core and Hierarchical Role Based Access Control (RBAC) profile of XACML, Version 2.0. Committee Draft 01, 30 September 2004. OASIS Open.
9. Prime Minister and Minister for the Cabinet Office of the UK. Modernising Government, presented to Parliament, March 1999.
10. S. Rohrig. Using Process Models to Analyze Health Care Security Requirements. International Conference Advances in Infrastructure for e-Business, e-Education, e-Science and e-Medecine on the internet. January 2002, l'Aquila, Italy.
11. Schaad, A. A Framework for Organisational Control Principles, PhD Thesis. Department of Computer Science, University of York, 2003.
12. A. Schaad, P. Spadone, and H. Weichsel. A case study of separation of duty properties in the context of the Austrian "eLaw" process. In Proceedings of the 20th ACM Symposium on Applied Computing 13-17 March 2005, Santa Fe, New Mexico, USA.
13. Wolfgang Schult, Peter Tröger, and Andreas Polze. Hasso-Plattner-Institute: Loom.NET - an Aspect Weaving Tool, in Workshop on Aspect-Oriented Programming, ECOOP'03, Darmstadt 2003.
14. Harry E. Smith. A Context-Based Access Control Model for HIPAA Privacy and Security Compliance. SANS Security Essentials. CISSP, July 18, 2001.
15. Enterprise JavaBeans Specification. Sun Microsystems. November 2003.
16. Java Authentication and Authorization Service, Reference Guide, Sun Microsystems.
17. Tine Verhanneman, Liesbeth Jaco, Bart De Win, Frank Piessens and Wouter Joosen. Adaptable Access Control Policies for Medical Information Systems. 4th IFIP WG6.1 International Conference, DAIS 2003, Paris, France, November 17-21, 2003.
18. Web Services Architecture. W3C. February 2004.
19. Martin Wimmer, Daniela Eberhardt, Pia Ehrnlechner and Alfons Kemper Reliable and Adaptable Security Engineering for Database-Web Services Proceedings of the 4th International Conference on Web Engineering (ICWE 2004), July 28-30, 2004, Munich, Germany.