From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis - Archive ouverte HAL Access content directly
Conference Papers Year : 2011

From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis

Abstract

This paper presents the KAOS2RBAC approach for Security Requirements Engineering. Starting from functional requirements, linked to a data model, the approach first identifies high level security goals. It then refines these security goals into security requirements linked to the functional model. Finally, these security requirements lead to the design of access control rules. An informal verification step checks that the rules give enough permission to enable all functional requirements. The approach takes benefit of the KAOS notations to link functional and non-functional goals, agents, data, and access control rules in a single requirements model. This enables traceability between security goals and the resulting access control rules. The approach is illustrated by a case study: an information system for medical urgency, taken from a real project.
Not file

Dates and versions

hal-00860807 , version 1 (11-09-2013)

Identifiers

Cite

Yves Ledru, Jean-Luc Richier, Akram Idani, Mohamed-Amine Labiadh. From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis. SAR-SSI 2011 - Conference on Network and Information Systems Security, May 2011, La Rochelle, France. pp.157-164, ⟨10.1109/SAR-SSI.2011.5931378⟩. ⟨hal-00860807⟩
98 View
0 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More