From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis

Résumé

This paper presents the KAOS2RBAC approach for Security Requirements Engineering. Starting from functional requirements, linked to a data model, the approach first identifies high level security goals. It then refines these security goals into security requirements linked to the functional model. Finally, these security requirements lead to the design of access control rules. An informal verification step checks that the rules give enough permission to enable all functional requirements. The approach takes benefit of the KAOS notations to link functional and non-functional goals, agents, data, and access control rules in a single requirements model. This enables traceability between security goals and the resulting access control rules. The approach is illustrated by a case study: an information system for medical urgency, taken from a real project.
Fichier non déposé

Dates et versions

hal-00860807 , version 1 (11-09-2013)

Identifiants

Citer

Yves Ledru, Jean-Luc Richier, Akram Idani, Mohamed-Amine Labiadh. From KAOS to RBAC: A Case Study in Designing Access Control Rules from a Requirements Analysis. SAR-SSI 2011 - Conference on Network and Information Systems Security, May 2011, La Rochelle, France. pp.157-164, ⟨10.1109/SAR-SSI.2011.5931378⟩. ⟨hal-00860807⟩
99 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More