19
rbacUML: Role-Based Access Control Verification and Analysis on UML Lionel Montrieux <[email protected]>

rbacUML at CodeGeneration 2012

Embed Size (px)

DESCRIPTION

 

Citation preview

Page 1: rbacUML at CodeGeneration 2012

rbacUML: Role-Based Access Control Verification and Analysis on UML

Lionel Montrieux<[email protected]>

Page 2: rbacUML at CodeGeneration 2012

Centre for Research in ComputingThe Open UniversityWalton HallMilton KeynesMK7 6AA

www.open.ac.uk

Page 3: rbacUML at CodeGeneration 2012

Access Control

Page 4: rbacUML at CodeGeneration 2012
Page 5: rbacUML at CodeGeneration 2012
Page 6: rbacUML at CodeGeneration 2012
Page 7: rbacUML at CodeGeneration 2012
Page 8: rbacUML at CodeGeneration 2012
Page 9: rbacUML at CodeGeneration 2012

rbacUML

Page 10: rbacUML at CodeGeneration 2012

Configuration

Page 11: rbacUML at CodeGeneration 2012

Business Logic

Page 12: rbacUML at CodeGeneration 2012

Business Logic (2)

Page 13: rbacUML at CodeGeneration 2012

Tests

Page 14: rbacUML at CodeGeneration 2012

Features

• RBAC modelling• Verification• Coverage analysis• Completeness analysis• Satisfiability analysis• Redundancy detection• LDAP import

Page 15: rbacUML at CodeGeneration 2012

Research directions

• (secure) code generation• Automatic correction of insecure models• Evolution and merging support• ...

Page 16: rbacUML at CodeGeneration 2012
Page 17: rbacUML at CodeGeneration 2012

http://computing-research.open.ac.uk/rbac/

Get the tool

Page 18: rbacUML at CodeGeneration 2012

Knowledge Exchange Vouchers

• Engage with academic partners at the OU• Up to £10k (your contribution: 25%)• Deadline: 31st May 2012• Projects must start before 1st July 2012

Page 19: rbacUML at CodeGeneration 2012

Questions?D

oodles by Jessica Hardaw

ay