论文信息 - A Metamodel of the B Modeling of Access-Control Policies: Work in Progress

A Metamodel of the B Modeling of Access-Control Policies: Work in Progress

Verification and validation of access-control policies for information systems is a difficult yet necessary task. In order to take advantage of the formal properties and tools of the B method, we introduce in this paper a metamodel of the B modeling of access control policies. This metamodel lead to the development of a formal prototype of an access control filter combined to the system. It allows verification and validation of policies before implementation.

[1] Mark Strembeck,et al. An approach to engineer and enforce context constraints in an RBAC environment , 2003, SACMAT '03.

[2] Jean-Raymond Abrial,et al. The B-book - assigning programs to meanings , 1996 .

[3] Marc Frappier,et al. Synthesizing Information Systems: the APIS Project , 2007, RCIS.

[4] David A. Basin,et al. SecureUML: A UML-Based Modeling Language for Model-Driven Security , 2002, UML.

[5] Jean-Marc Jézéquel,et al. ≪UML≫ 2002 — The Unified Modeling Language , 2002, Lecture Notes in Computer Science.

[6] Michael J. Butler,et al. ProB: A Model Checker for B , 2003, FME.

[7] Marc Frappier,et al. Systematic Translation Rules from astd to Event-B , 2010, IFM.

[8] Stefania Gnesi,et al. FME 2003: Formal Methods: International Symposium of Formal Methods Europe, Pisa, Italy, September 8-14, 2003. Proceedings , 2003, Lecture Notes in Computer Science.

[9] Marc Frappier,et al. Extending statecharts with process algebra operators , 2008, Innovations in Systems and Software Engineering.

[10] Marc Frappier,et al. Combining UML, ASTD and B for the formal specification of an access control filter , 2011, Innovations in Systems and Software Engineering.