A Formal Enforcement Framework for Role-Based Access Control Using Aspect-Oriented Programming

Many of today’s software applications require a high-level of security, defined by a detailed policy and attained via mechanisms such as role-based access control (RBAC), mandatory access control, digital signatures, etc. The integration of the design/implementation processes of access-control policies with runtime enforcement mechanisms is crucial to achieve an acceptable level of security for a software application. Our prior research focused on formalizing the concept of a role slice, which is a unified modeling language (UML) artifact that captures RBAC security requirements by defining permissions in the form of allowable or prohibited methods, and by specifying roles as specialized class diagrams that contain those methods. This paper augments this effort by introducing a formal framework for the security of software applications that supports the automatic translation of a role-slice access-control policy (RBAC requirements) into aspect-oriented programming (AOP) enforceme...

• Type: Conference
• Year: 2005
• Where: UML
• Authors: Jaime A. Pavlich-Mariscal, Laurent Michel, Steven A. Demurjian
• Keywords: Formal Framework, Natural Language Processing, RBAC Security Requirements, Software Applications, UML 2005