RBAC/MAC Security Analysis and Design for UML

In software construction, analysis investigates the boundary of a system (scope and requirements), its usage and access, and from a security perspective, who needs access to what when. Given sufficient analysis, a logical initial solution can be designed to capture system functionality including security capabilities. To facilitate the iterative process of analysis and design, one popular technique is the unified modeling language, UML, a language for specifying, visualizing, constructing and documenting software artifacts. In UML, diagrams provide alternate perspectives on the design, including: use-case diagrams for the interaction of users with system components, class diagrams for the static classes and relationships among them, and sequence diagrams for the dynamic behavior of objects. However, the ability to analyze and design security requirements in UML is not directly supported. In this paper, we propose an approach that incorporates rolebased access control (RBAC) and mandat...

• Type: Conference
• Year: 2004
• Where: DBSEC
• Authors: Thuong Doan, Steven A. Demurjian, Charles E. Phillips, T. C. Ting
• Keywords: Class Diagrams, DBSEC 2004, DBSEC 2007, Relevant Uml Elements, Use-case Diagrams