2009 International Conference on Knowledge and Systems Engineering Analyzing RBAC Security Policy of Implementation Using AST Hanoi October 13-October 17 ISBN: 978-0-7695-3846-4
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/KSE.2009.23
Security policy is a critical property in software applications which require high levels of safety and security. It has to be clearly specified in requirement documents and its implementation must be conformed to the specification. In this paper, we propose an approach to check if the implementation is in accordance with its security policy specification. We use the Abstract Syntax Tree (AST), another manner of expressing the program, to analyze the source code and specify user permission policy in software systems by Role-Based Access Control (RBAC).
Index Terms:
RBAC policy, conformance checking, AST
Citation:
Tuan-Hung Pham, Ninh-Thuan Truong, Viet-Ha Nguyen, "Analyzing RBAC Security Policy of Implementation Using AST," kse, pp.215-219, 2009 International Conference on Knowledge and Systems Engineering, 2009 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||