A Pattern-Based Technique for Developing UML Models of Access Control Systems

This paper describes a pattern-based technique for systematic development of UML models of secure systems using access control. Access control is viewed and specified as a design pattern. An access control pattern is applied to a functional UML model of an application to be secured using a composition algorithm. We demonstrate the technique using Mandatory Access Control (MAC) and a model of a simple file system. We also discuss how the composed model can be evaluated for security assurance expected from the applied access control.

• Type: Conference
• Year: 2006
• Where: COMPSAC
• Authors: Dae-Kyoo Kim, Priya Gokhale
• Keywords: Access Control, Access Control Pattern, COMPSAC 2006, Software Engineering, UML Model