Access Control Specification in UML

2009 ◽  
pp. 2775-2794
Author(s):  
Manuel Koch ◽  
Francesco Parisi-Presicce ◽  
Karl Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Control Model ◽  
Security Requirements ◽  
Policy Rules ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern soft¬ware systems. In order to produce secure systems, it is necessary to provide soft¬ware engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the specification of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control specification, allows to reason about the coherence of the access control spec¬ification. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control specification are illustrated with an example access control model for distributed object systems.

Access Control Specification in UML

2007 ◽  
pp. 220-243
Author(s):  
M. Koch ◽  
F. Parisi-Presicce ◽  
K. Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Security Requirements ◽  
Software Systems ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Software Engineers ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern software systems. In order to produce secure systems, it is necessary to provide software engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the speci?cation of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control speci?ca-tion, allows to reason about the coherence of the access control speci?cation. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control speci?cation are illustrated with an example access control model for distributed object systems.

Access Control Specification in UML

2008 ◽  
pp. 1456-1475
Author(s):  
M. Koch ◽  
F. Parisi-Presicce ◽  
K. Pauls
Keyword(s):  
Access Control ◽  
Formal Semantics ◽  
Security Requirements ◽  
Software Systems ◽  
Secure Systems ◽  
Distributed Object ◽  
Access Control Policies ◽  
Software Engineers ◽  
Uml Diagrams ◽  
Distributed Object Systems

Security requirements have become an integral part of most modern software systems. In order to produce secure systems, it is necessary to provide software engineers with the appropriate systematic support. This chapter discusses a methodology to integrate the speci?cation of access control policies into UML. The methodology, along with the graph-based formal semantics for the UML access control speci?ca-tion, allows to reason about the coherence of the access control speci?cation. The chapter also presents a procedure to modify policy rules to guarantee the satisfaction of constraints, and shows how to generate access control requirements from UML diagrams. The main concepts in the UML access control speci?cation are illustrated with an example access control model for distributed object systems.

scholarly journals MUTATION TESTING OF ACCESS CONTROL POLICIES

2021 ◽  
Vol 5 (1) ◽  
pp. 118-122
Author(s):  
Galina Cherneva ◽  
Pavlо Khalimov
Keyword(s):  
Access Control ◽  
Computer Security ◽  
Large Degree ◽  
Control Model ◽  
Security Requirements ◽  
Direct Access ◽  
Access Control Model ◽  
Control Policies ◽  
Modern Computer ◽  
Access Control Policies

One of the most important and integral components of modern computer security are access control systems. The objective of an access control system (ACS) is often described in terms of protecting system resources against inappropriate or unwanted user access. However, a large degree of sharing can interfere with the protection of resources, so a sufficiently detailed AC policy should allow selective exchange of information when, in its absence, sharing can be considered too risky in general. Erroneous configurations, faulty policies, as well as flaws in the implementation of software can lead to global insecurity. Identifying the differences between policy specifications and their intended functions is crucial because the correct implementation and enforcement of the policies of a particular application is based on the premise that the specifications of this policy are correct. As a result of the policy, the specifications presented by the models must undergo rigorous validation and legalization through systematic checks and tests to ensure that the specifications of the policies really correspond to the wishes of the creators. Verifying that access control policies and models are consistent is not a trivial and critical task. And one of the important aspects of such a check is a formal check for inconsistency and incompleteness of the model, and the security requirements of the policy, because the access control model and its implementation do not necessarily express policies that can also be hidden, embedded by mixing with direct access restrictions or another access control model.

scholarly journals HASBE access control model with Secure Key Distribution and Efficient Domain Hierarchy for cloud computing

2016 ◽  
Vol 6 (2) ◽  
pp. 770
Author(s):  
RajaniKanth Aluvalu ◽  
Vanraj Kamliya ◽  
Lakshmi Muddana
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Key Distribution ◽  
Control Model ◽  
Huge Amount ◽  
Hierarchical Assembly ◽  
Fine Grained ◽  
Access Control Models ◽  
Access Control Policies ◽  
Attribute Based Encryption

Cloud computing refers to the application and service that run on a distributed system using virtualized resources and access by common internet protocol and networking standard. Cloud computing virtualizes system by pooling and sharing resources. System and resources can be monitored from central infrastructure as needed. It requires high security because now day’s companies are placing more essential and huge amount of data on cloud. Hence traditional access control models are not sufficient for cloud computing applications. So encryption based on Attribute (“ABE”-“Attribute based encryption”) has been offered for access control of subcontracted data in cloud computing with complex access control policies. Traditional HASBE provides Flexibility, scalability and fine-grained access control but does not support hierarchical domain structure. In this paper, we had enhanced “Hierarchical attribute-set-based encryption” (“HASBE”) access control with a hierarchical assembly of users, with flexible domain Hierarchy structure and Secure key distribution with predefined policy

HASBE access control model with Secure Key Distribution and Efficient Domain Hierarchy for cloud computing

2016 ◽  
Vol 6 (2) ◽  
pp. 770
Author(s):  
RajaniKanth Aluvalu ◽  
Vanraj Kamliya ◽  
Lakshmi Muddana
Keyword(s):  
Cloud Computing ◽  
Access Control ◽  
Key Distribution ◽  
Control Model ◽  
Huge Amount ◽  
Hierarchical Assembly ◽  
Fine Grained ◽  
Access Control Models ◽  
Access Control Policies ◽  
Attribute Based Encryption

Cloud computing refers to the application and service that run on a distributed system using virtualized resources and access by common internet protocol and networking standard. Cloud computing virtualizes system by pooling and sharing resources. System and resources can be monitored from central infrastructure as needed. It requires high security because now day’s companies are placing more essential and huge amount of data on cloud. Hence traditional access control models are not sufficient for cloud computing applications. So encryption based on Attribute (“ABE”-“Attribute based encryption”) has been offered for access control of subcontracted data in cloud computing with complex access control policies. Traditional HASBE provides Flexibility, scalability and fine-grained access control but does not support hierarchical domain structure. In this paper, we had enhanced “Hierarchical attribute-set-based encryption” (“HASBE”) access control with a hierarchical assembly of users, with flexible domain Hierarchy structure and Secure key distribution with predefined policy

Parallel Access Control Model in Cross-Domain Grid Computing Environment

2018 ◽  
Vol 9 (1) ◽  
pp. 50-65
Author(s):  
Sarra Namane ◽  
Nassira Ghoualmi
Keyword(s):  
Access Control ◽  
Grid Computing ◽  
Control Model ◽  
Security Requirements ◽  
Access Control Model ◽  
Cross Domain ◽  
Proposed Model ◽  
Security Challenges ◽  
Role Mapping ◽  
Parallel Access

Despite the various attractive features that grid computing has to offer, it has many great security challenges, such as access control. With the expansion of the network scale, a large number of authorization requests have to be treated; on the other hand, the multi-domain nature of grid computing generates difficult to manage questions about cross-domain access control, and a variety of solutions use the role mapping mechanism to allow collaborations between domains. But this mechanism gives a potential risk of violating consistency properties of domains. This article aims to address this issue and proposes a parallel access control model in cross-domain grid computing architecture to be more convenient to the security requirements of the multi-domain environment. Finally, as a proof of concept, the authors implement a cross-domain and parallel authorization simulator (CD-PAS) where experiments are done. The obtained results show that the proposed model is sensitive to the number of authorization requests. In addition, it can effectively reduce the execution time of access control mechanism.

scholarly journals PyRos: A State Channel-Based Access Control System for a Public Blockchain Network

2020 ◽  
Vol 2020 ◽  
pp. 1-13
Author(s):  
Siwan Noh ◽  
Sang Uk Shin ◽  
Kyung-Hyune Rhee
Keyword(s):  
Control System ◽  
Access Control ◽  
The State ◽  
Security Requirements ◽  
Decentralized System ◽  
Blockchain Technology ◽  
Access Control Policies ◽  
Previous State ◽  
Access Control System

Blockchain is a technology that enables the implementation of a decentralized system by replacing the role of the centralized entity with the consensus of participants in the system to solve the problem of subordination to the centralized entity. Blockchain technology is being considered for application in numerous fields; however, the scalability limitation of a public blockchain has led many researchers to consider private blockchains, which reduce the security of the system while improving scalability. A state channel represents a leading approach among several scalability solutions, intended to address public blockchain scalability challenges while ensuring the security of the blockchain network. Participants in the channel perform the process of updating the state of the channel outside the blockchain. This process can proceed very quickly because it does not require the consensus of the blockchain network, but still, like on-chain, it can guarantee features such as irreversibility. In this paper, we propose the PyRos protocol, an access control system that supports the trading and sharing of data between individuals on a public blockchain based on the state channel. As far as we know, the research using the off-chain state channel for access control has not been proposed yet, so PyRos is a new approach in this field. In PyRos, user-defined access control policies are stored off-chain, and policy updates are always rapid regardless of the performance of the blockchain network. Moreover, PyRos provides means to prevent malicious participants from arbitrarily using the channel’s previous state while resolving constraints due to scalability problems, along with privacy guarantees for the transaction content. To evaluate the efficiency and security of PyRos, we provide qualitative analysis of security requirements and analysis in terms of the performance of public blockchain platforms.

scholarly journals An Algebraic Model to Analyze Role-Based Access Control Policies

2018 ◽  
Vol 12 (10) ◽  
pp. 50
Author(s):  
Khair Eddin Sabri
Keyword(s):  
Access Control ◽  
Algebraic Model ◽  
Control Model ◽  
Role Based Access Control ◽  
Access Control Model ◽  
Prototype Tool ◽  
Access Control Policies ◽  
Proposed Model ◽  
Access Information ◽  
Role Based

Role-Based Access Control (RBAC) is a well known access control model used to preserve the confidentiality of information by specifying the ability of users to access information based on their roles. Usually these policies would be manipulated by combining or comparing them especially when defined in a distributed way. Furthermore, these policies should satisfy predefined authorization constraints. In this paper, we present an algebraic model for specifying and analyzing RBAC policies. The proposed model enables us to specify policies and verify the satisfaction of predefined authorization constraints. Furthermore, the model allows us to combine policies and analyze their effect on predefined constraints. The model consists of few operators that give simplicity in specifying polices. We present a prototype tool used for facilitating the analysis.

Sign in / Sign up

Export Citation Format

Share Document