Access Control Specification in UML

2007 ◽  
pp. 220-243
Author(s):  
M. Koch ◽  
F. Parisi-Presicce ◽  
K. Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Security Requirements ◽  
Software Systems ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Software Engineers ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern software systems. In order to produce secure systems, it is necessary to provide software engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the speci?cation of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control speci?ca-tion, allows to reason about the coherence of the access control speci?cation. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control speci?cation are illustrated with an example access control model for distributed object systems.

Access Control Specification in UML

2008 ◽  
pp. 1456-1475
Author(s):  
M. Koch ◽  
F. Parisi-Presicce ◽  
K. Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Security Requirements ◽  
Software Systems ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Software Engineers ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern software systems. In order to produce secure systems, it is necessary to provide software engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the speci?cation of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control speci?ca-tion, allows to reason about the coherence of the access control speci?cation. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control speci?cation are illustrated with an example access control model for distributed object systems.

Access Control Specification in UML

2009 ◽  
pp. 2775-2794
Author(s):  
Manuel Koch ◽  
Francesco Parisi-Presicce ◽  
Karl Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Control Model ◽  
Security Requirements ◽  
Policy Rules ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern soft¬ware systems. In order to produce secure systems, it is necessary to provide soft¬ware engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the specification of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control specification, allows to reason about the coherence of the access control spec¬ification. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control specification are illustrated with an example access control model for distributed object systems.

Sign in / Sign up

Export Citation Format

Share Document