Article

A model-driven approach for the visual specification of Role-Based Access Control policies in web systems

Authors:

Paloma Diaz,

Ignacio Aedo,

Daniel Sanz,

Alessio MaliziaAuthors Info & Claims

VLHCC '08: Proceedings of the 2008 IEEE Symposium on Visual Languages and Human-Centric Computing

Pages 203 - 210

https://doi.org/10.1109/VLHCC.2008.4639087

Published: 15 September 2008 Publication History

Publisher Site

Abstract

Specifying the access policy of a web system is a relevant design concern that is often dismissed or postponed until the implementation. ADM-RBAC (Ariadne Development Method with Role-Based Access Control) is a model-driven approach for web systems that supports the specification of access control policies in an integrated way and at two abstraction levels. At the conceptual level a number of visual models specify the access policy in a way that is similar to the users’ point of view. At the detailed level, models are oriented towards providing enough details to generate prototypes in an automatic or semiautomatic way. In this paper we describe the visual models of ADM-RBAC and their empirical evaluation.

Cited By

View all

Aljeraisy ARana OPerera C(2024)Empowering IoT Developers with Privacy-Preserving End-User Development ToolsProceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies10.1145/36785888:3(1-47)Online publication date: 9-Sep-2024
https://dl.acm.org/doi/10.1145/3678588
Alhirabi NBeaumont SLlanos JMeedeniya DRana OPerera C(2023)PARROTProceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies10.1145/35808807:1(1-37)Online publication date: 28-Mar-2023
https://dl.acm.org/doi/10.1145/3580880
Van Den Berghe AScandariato RYskout KJoosen W(2017)Design notations for secure softwareSoftware and Systems Modeling (SoSyM)10.1007/s10270-015-0486-916:3(809-831)Online publication date: 1-Jul-2017
https://dl.acm.org/doi/10.1007/s10270-015-0486-9
Show More Cited By

A model-driven approach for the visual specification of Role-Based Access Control policies in web systems
1. Security and privacy
  1. Security services
  2. Systems security

Recommendations

Configuring role-based access control to enforce mandatory and discretionary access control policies

Access control models have traditionally included mandatory access control (or lattice-based access control) and discretionary access control. Subsequently, role-based access control has been introduced, along with claims that its mechanisms are general ...
Delegation in role-based access control

User delegation is a mechanism for assigning access rights available to one user to another user. A delegation can either be a grant or transfer operation. Existing work on delegation in the context of role-based access control models has extensively ...
Model-driven run-time enforcement of complex role-based access control policies
ASE '18: Proceedings of the 33rd ACM/IEEE International Conference on Automated Software Engineering

A Role-based Access Control (RBAC) mechanism prevents unauthorized users to perform an operation, according to authorization policies which are defined on the user’s role within an enterprise. Several models have been proposed to specify complex RBAC ...

Comments

Information & Contributors

Information

Published In

VLHCC '08: Proceedings of the 2008 IEEE Symposium on Visual Languages and Human-Centric Computing

September 2008

276 pages

ISBN:9781424425280

Publisher

IEEE Computer Society

United States

Publication History

Published: 15 September 2008

Qualifiers

Article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

4
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 26 Jan 2025

Other Metrics

View Author Metrics

Citations

Cited By

View all

Aljeraisy ARana OPerera C(2024)Empowering IoT Developers with Privacy-Preserving End-User Development ToolsProceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies10.1145/36785888:3(1-47)Online publication date: 9-Sep-2024
https://dl.acm.org/doi/10.1145/3678588
Alhirabi NBeaumont SLlanos JMeedeniya DRana OPerera C(2023)PARROTProceedings of the ACM on Interactive, Mobile, Wearable and Ubiquitous Technologies10.1145/35808807:1(1-37)Online publication date: 28-Mar-2023
https://dl.acm.org/doi/10.1145/3580880
Van Den Berghe AScandariato RYskout KJoosen W(2017)Design notations for secure softwareSoftware and Systems Modeling (SoSyM)10.1007/s10270-015-0486-916:3(809-831)Online publication date: 1-Jul-2017
https://dl.acm.org/doi/10.1007/s10270-015-0486-9
Bomsdorf B(2010)RTMEProceedings of the Third international conference on Human-centred software engineering10.5555/1939212.1939228(149-157)Online publication date: 14-Oct-2010
https://dl.acm.org/doi/10.5555/1939212.1939228

Abstract

Cited By

Recommendations

Configuring role-based access control to enforce mandatory and discretionary access control policies

Delegation in role-based access control

Model-driven run-time enforcement of complex role-based access control policies

Comments

Information

Published In

Publisher

Publication History

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Share

Share this Publication link

Share on social media

Affiliations