Using parameterized UML to specify and compose access control models

IFIP Advances in Information and Communication Technology

Volumn 140, Issue , 2004, Pages 49-65

  Ray, Indrakshi ^a   Li, Na ^a   Kim, Dae Kyoo ^a   France, Robert ^a  

^a Department of Environmental and Radiological Health Sciences   (United States)

Author keywords

Mandatory Access Control; Role Based Access Control; Unified Modeling Language

Indexed keywords

FINANCE; INFORMATION SYSTEMS; INFORMATION USE; UNIFIED MODELING LANGUAGE;

ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; CONTROL FRAMEWORK; MANDATORY ACCESS CONTROL; MILITARY DOMAINS; PARAMETERIZED; ROLE-BASED ACCESS CONTROL; SECURITY BREACHES;

ACCESS CONTROL;

EID: 84902436516     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/1-4020-7901-x_4     Document Type: Conference Paper

References (10)

1. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and Systems Security, 4 (3), August 2001.
2. Jan J-urjens. UMLsec: Extending UML for Secure Systems Development. In UML2002, 2002.
3. C. E. Landwehr, C. L. Heitmeyer, and J. McLean. A security model for military message systems. In ACM Transactions on Computer Systems 2 (3): 198-222, August, 1984.
4. Torsten Lodderstedt, David Basin, and Jürgen Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. In 5th International Conference on the Unified Modeling Language, 2002.
5. Matunda Nyanchama and Sylvia Osborn. Modeling Mandatory Access Control in Role-Based Security Systems. In IFIP Workshop on Database Security, 1995.
6. Sylvia Osborn. Mandatory access control and role-based access control revisited. In Proceedings of the Second Workshop on Role-Based Access Control, 1997.
7. C. E. Phillips, S. A. Demurjian, and T. C. Ting. Toward information assurance in dynamic coalitions. In Proceedings of the IEEE Workshop on Information Assurance, United States Military Academy, West Point, NY, June 2002.
8. R. Sandhu and P. Samarati. Access Control: Principles and Practice. In IEEE Communications, Volumn 32, Number 9, September, 1994.
9. Ravi Sandhu. Role-Based Access Control. In Advances in Computers, volume 46. Academic Press, 1998.
10. The Object Management Group (OMG). Unified Modeling Language. Version 1.4, OMG, http://www.omg.org, September 2001.