The Open UniversitySkip to content
 

Challenges in Model-Based Evolution and Merging of Access Control Policies

Montrieux, Lionel; Wermelinger, Michel and Yu, Yijun (2011). Challenges in Model-Based Evolution and Merging of Access Control Policies. In: Joint 12th International Workshop on Principles on Software Evolution and 7th ERCIM Workshop on Software Evolution, 5-6 Sep 2011, Szeged, Hungary.

Full text available as:
[img]
Preview
PDF (Version of Record) - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (90Kb)
URL: http://www.pleiad.cl/iwpse-evol/index.html
Google Scholar: Look up in Google Scholar

Abstract

Access Control plays a crucial part in software security, as it is responsible for making sure that users have access to the resources they need while being forbidden from accessing resources they do not need. Access control models such as Role-Based Access Control have been developed to help system administrators deal with the increasing complexity of the rules that determine whether or not a particular user should access a particular resource. These rules, as well as the users and their needs, are likely to evolve over time. In some cases, it may even be necessary to merge several access control configurations into a single one. In this position paper, we review existing research in model-based software evolution and merging, and argue the need for a specific approach for access control in order to take its specific requirements into account.

Item Type: Conference Item
Copyright Holders: 2011 ACM
Extra Information: ISBN: 978-1-4503-0848-9
Pages: 116-120
Keywords: security; UML; RBAC; model; verification; evolution; incremental verification; merging; OCL; access control
Academic Unit/Department: Mathematics, Computing and Technology > Computing & Communications
Interdisciplinary Research Centre: Centre for Research in Computing (CRC)
eSTEeM
Related URLs:
Item ID: 29084
Depositing User: Michel Wermelinger
Date Deposited: 12 Jul 2011 08:30
Last Modified: 16 May 2014 05:26
URI: http://oro.open.ac.uk/id/eprint/29084
Share this page:

Actions (login may be required)

View Item
Report issue / request change

Policies | Disclaimer

© The Open University   + 44 (0)870 333 4340   general-enquiries@open.ac.uk