An Approach to Capture Role-Based Access Control Models from Spring Web Applications

2017 ◽  
Author(s):  
Andrey Sergeev ◽  
Raimundas Matulevicius
Keyword(s):  
Access Control ◽  
Web Applications ◽  
Role Based Access Control ◽  
Access Control Models ◽  
Control Models ◽  
Role Based

Access Control Framework for Cloud Computing

2019 ◽  
pp. 698-711
Author(s):  
Kashif Munir ◽  
Lawan A. Mohammed
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Role Based Access Control ◽  
Discretionary Access Control ◽  
Job Functions ◽  
Access Control Models ◽  
Control Models ◽  
Control Framework ◽  
Role Based ◽  
Access Privileges

Access control is generally a rule or procedure that allows, denies, restricts or limit access to system's resources. It may, as well, monitor and record all attempts made to access a system. Access Control may also identify users attempting to access unauthorized resources. It is a mechanism which is very much important for protection in computer security. Various access control models are in use, including the most common Mandatory Access Control (MAC), Discretionary Access Control (DAC) and Role Based Access Control (RBAC). All these models are known as identity based access control models. In all these access control models, user (subjects) and resources (objects) are identified by unique names. Identification may be done directly or through roles assigned to the subjects. These access control methods are effective in unchangeable distributed system, where there are only a set of Users with a known set of services. For this reason, we propose a framework which is well suited to many situations in cloud computing where users or applications can be clearly separated according to their job functions. In this chapter, we proposes a role based access control framework with various features including security of sensitive data, authorization policy and secure data from hackers. Our proposed role based access control algorithm provides tailored and fine level of user access control services without adding complexity, and supports access privileges updates dynamically when a user's role is added or updated.

An Incremental B-Model for RBAC-Controlled Electronic Marking System

2016 ◽  
Vol 7 (2) ◽  
pp. 37-64 ◽  
Author(s):  
Nasser Al-hadhrami ◽  
Benjamin Aziz ◽  
Lotfi ben Othmane
Keyword(s):  
Model Checking ◽  
Access Control ◽  
Role Based Access Control ◽  
System Architectures ◽  
Incremental Development ◽  
Access Control Models ◽  
Control Models ◽  
Role Based

The incremental development of software through the addition of new features and the insertion of new access rules potentially renders the access control models inconsistent and creates security flaws. This paper proposes modeling Role Based Access Control (RBAC) models of these software using the B language and re-evaluating the consistency of the models following model changes. It shows the mechanism of formalizing RBAC policies of an Electronic Marking System (EMS) using B specifications and illustrates the verification of the consistency of the RBAC specification, using model checking and proof obligations. In addition, it shows how to address inconsistencies that result from incremental specification of system' architectures.

scholarly journals Evolution of access control models for protection of patient details: a survey

2018 ◽  
Vol 7 (2.8) ◽  
pp. 554
Author(s):  
Geetanjali Sinha ◽  
Prabhu Shankar K.C ◽  
Shaurya Jain
Keyword(s):  
Access Control ◽  
Control Model ◽  
Role Based Access Control ◽  
Patient Privacy ◽  
Access Control Model ◽  
Access Control Models ◽  
Control Models ◽  
Role Hierarchy ◽  
Role Based ◽  
Electronic Hospital

Hospitals across the world are adapting to Electronic Hospital Information Systems and are moving away from the manual paper systems to provide patients efficient services. Numerous Access ControlModels have been deployed for securing patient privacy one of them being Role Based Access Control Model (RBAC). The current models merely allow access on the basis of roles and role hierarchy without actually understanding the real intention of the person accessing the system. This could lead to a compromise of patient privacy and thus new methods have been evolving. In this survey we will see an evolution of the access control models which lead to the discovery of KC-RBAC (Knowledge Constrained Role Based Access Control) Model which takes into consideration the knowledge related to the medical domain along with the role to provide authorization.

Role-based access control models

Computer ◽  
1996 ◽  
Vol 29 (2) ◽  
pp. 38-47 ◽  
Author(s):  
R.S. Sandhu ◽  
E.J. Coyne ◽  
H.L. Feinstein ◽  
C.E. Youman
Keyword(s):  
Access Control ◽  
Role Based Access Control ◽  
Access Control Models ◽  
Control Models ◽  
Role Based

Access Control Framework for Cloud Computing

2015 ◽  
pp. 314-325
Author(s):  
Kashif Munir ◽  
Lawan A. Mohammed
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Role Based Access Control ◽  
Discretionary Access Control ◽  
Job Functions ◽  
Access Control Models ◽  
Control Models ◽  
Control Framework ◽  
Role Based ◽  
Access Privileges

Access control is generally a rule or procedure that allows, denies, restricts or limit access to system's resources. It may, as well, monitor and record all attempts made to access a system. Access Control may also identify users attempting to access unauthorized resources. It is a mechanism which is very much important for protection in computer security. Various access control models are in use, including the most common Mandatory Access Control (MAC), Discretionary Access Control (DAC) and Role Based Access Control (RBAC). All these models are known as identity based access control models. In all these access control models, user (subjects) and resources (objects) are identified by unique names. Identification may be done directly or through roles assigned to the subjects. These access control methods are effective in unchangeable distributed system, where there are only a set of Users with a known set of services. For this reason, we propose a framework which is well suited to many situations in cloud computing where users or applications can be clearly separated according to their job functions. In this chapter, we proposes a role based access control framework with various features including security of sensitive data, authorization policy and secure data from hackers. Our proposed role based access control algorithm provides tailored and fine level of user access control services without adding complexity, and supports access privileges updates dynamically when a user's role is added or updated.

Research of Access Control Models in Personal Networks

2014 ◽  
Vol 989-994 ◽  
pp. 4751-4754
Author(s):  
Yu Lan Zhao ◽  
Chun Feng Jiang
Keyword(s):  
Access Control ◽  
Control Model ◽  
Personal Networks ◽  
Role Based Access Control ◽  
Access Control Model ◽  
Access Control Models ◽  
Control Models ◽  
System Resources ◽  
Role Based

How to prevent illegal users from sharing system resources was one of the main purposes for MAGNET Security Group. This paper introduced some major access control models such as traditional access control models, role-based access control model (RBAC), task-based access control model (TBAC) and role-task-based access control model (T-RBAC). In the end, a feasible scheme PN_T-RBAC was proposed at the base of the T-RBAC model in existence, which was suitable for the coalition environment of personal networks.

Sign in / Sign up

Export Citation Format

Share Document