Model Driven Security: Unification of Authorization Models for Fine-Grain Access Control

The research vision of the Unified Component Meta Model Framework (UniFrame) is to develop an infrastructure for components that enables a plug and play component environment where the security contracts are a part of the component description and the security aware middleware is generated by the component integration toolkits. That is, the components providers will define security contracts in addition to the functional contracts. These security contracts will be used to analyze the ability of a service to meet the security constraints when used in a composition of components. A difficulty in progressing the security related aspects of this infrastructure is the lack of a unified access control model that can be leveraged to identify protected resources and access control points at the model level. Existing component technologies utilize various mechanisms for specifying security constraints. This paper will explore issues related to expressing access control requirements of componen...

• Type: Conference
• Year: 2003
• Where: EDOC
• Authors: Carol C. Burt, Barrett R. Bryant, Rajeev R. Raje, Andrew M. Olson, Mikhail Auguston
• Keywords: Access Control, EDOC 2003, Operating System, Security Constraints, Security Contracts