NDLI: A transformation contract to generate aspects from access control policies

Please wait, while we are loading the content...

A transformation contract to generate aspects from access control policies

Content Provider	Springer Nature Link
Author	Braga, Christia
Copyright Year	2010
Abstract	Access control is an important security issue. It has been addressed since the late 1960s in the early time-sharing computer systems. Many access control models have been proposed since than but of particular interest is Ferraiolo and Khun’s role-based access control model (RBAC). It is a simple and yet general model which has been deeply studied and applied both in industry and in academia. A variety of industrial standards have been proposed based on this model. Generating code for an access control policy is an interesting challenge. Understanding access control as a non-functional concern that cross-cuts the functional part of a system raises difficulties quite suitable for a solution based on aspect-oriented programming. In this paper, we address the problems of specification and validation of code generation for access control policies targeting an aspect-based infra-structure. We propose an MDA approach. The code generator is a transformation from SecureUML, an RBAC-based modeling language, to the language Aspects for Access Control (AAC), an aspect-oriented modeling language proposed in this paper. Metamodels are used to represent the languages and to specify the transformation. A metamodel is used to represent the abstract syntax of a language and the constraints that a given instance model of the metamodel must fulfill. We also use a metamodel to specify the code generator. This transformation metamodel, together with all the constraints, that is, from both languages and those constraints regarding the merge of the two languages, we call a transformation contract. It merges and conservatively extends the source and target metamodels of the model transformation it represents. In the context of code-generation for access control policies, the transformation contract specifies the relationships between the abstract syntaxes of SecureUML and AAC and constrains the two languages. The validation of the code generator also uses the transformation contract. For a given access control policy and aspect, represented as instances of the appropriate metamodels, with aspects produced by the code generator, the constraints of the transformation contract must hold. We have prototyped a transformer from SecureUML to aspects on top of ITP/OCL, an OCL interpreter that automatically validates the generated aspect code by applying the constraints of the transformation contract.
Starting Page	395
Ending Page	409
Page Count	15
File Format	PDF
ISSN	16191366
Journal	Software and Systems Modeling
Volume Number	10
Issue Number	3
e-ISSN	16191374
Language	English
Publisher	Springer-Verlag
Publisher Date	2010-03-09
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Business Information Systems Information Systems Applications (incl.Internet) Software Engineering Software Engineering/Programming and Operating Systems Programming Techniques Programming Languages, Compilers, Interpreters
Content Type	Text
Resource Type	Article
Subject	Modeling and Simulation Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

UML specification of access control policies and their formal verification

On challenges of model transformation from UML to Alloy

Flexible and configurable verification policies with Omnibus

Models for the digital transformation

Modeling Paradigms

Modeling for the cloud

Application of reflection in a model transformation language

SoSyM at three

Model-based development

A transformation contract to generate aspects from access control policies

Similar Documents

UML specification of access control policies and their formal verification

On challenges of model transformation from UML to Alloy

Flexible and configurable verification policies with Omnibus

Models for the digital transformation

Modeling Paradigms

Modeling for the cloud

Application of reflection in a model transformation language

SoSyM at three

Model-based development

A transformation contract to generate aspects from access control policies