Early Validation and Verification of a Distributed Role-Based Access Control Model | Zendy

Saad Zafar | Zendy; Robert J. Colvin | Zendy; Kirsten Winter | Zendy; Nisansala Yatapanage | Zendy; R. Geoff Dromey | Zendy

AI Assistant Blog Pricing

Home ZAIA Blog

Open Access

Early Validation and Verification of a Distributed Role-Based Access Control Model

Author(s) -

Saad Zafar,

Robert J. Colvin,

Kirsten Winter,

Nisansala Yatapanage,

R. Geoff Dromey

Publication year - 2007

Publication title -

proceedings - asia pacific software engineering conference/proceedings

Language(s) - English

Resource type - Conference proceedings

SCImago Journal Rank - 0.208

H-Index - 36

eISSN - 2640-0715

pISSN - 1530-1362

DOI - 10.1109/apsec.2007.46

Subject(s) - computer science , notation , access control , formal specification , model checking , process (computing) , functional requirement , system requirements specification , tree (set theory) , formal verification , distributed computing , reliability engineering , programming language , software engineering , operating system , engineering , arithmetic , mathematics , mathematical analysis

To ensure correct implementation of complex access control requirements, it is important that the validated and verified requirements are effectively integrated with the rest of the system. It is also important that the system can be validated and verified early in the development process. In this paper we present an integrated, role-based access control model. The model is based on the graphical behavior tree notation, and can be validated by simulation, as well as verified using a model checker. Using this model, access control requirements can be integrated with the rest of the system from the outset, because: a single notation is used to express both access control and functional requirements; a systematic and incremental approach to constructing a formal behavior tree specification can be adopted; and the specification can be simulated and model checked. The effectiveness of the model is evaluated using a case study with distributed access control requirements.

The content you want is available to Zendy users.

Already have an account? Click here to sign in.

Having issues? You can contact us here

Accelerating Research