Formal development of a secure access control filter - Archive ouverte HAL Access content directly
Conference Papers Year : 2016

Formal development of a secure access control filter

Abstract

With the advent of the internet, most organizations offer more and more access to their information systems in order to increase their benefits. However, such an opening may cause security issues if sufficient precautions are not taken. An adequate solution to secure access to information systems consists in (1) defining the sufficient security policies and (2) ensuring their correct deployment on a given technological infrastructure. The present paper deals with the first point by introducing a formal approach that permits to develop a secure filter for an information system that respects different kinds of security rules: functional, static and dynamic rules. The proposed approach uses the \texttt{SecureUML} language to express the static rules and adapts the UML activity diagrams for dynamic ones while the structure of the manipulated data and the functionalities are expressed using a UML class diagram. Starting from these graphical notations, the approach consists in mapping them into a B formal specification to ensure their consistency and validate the system. Finally, a proved filter, which permits to take into account different security rules, is formally derived using the B refinement technique
No file

Dates and versions

hal-01298113 , version 1 (05-04-2016)

Identifiers

Cite

Amel Mammar, Thi Mai Nguyen, Régine Laleau. Formal development of a secure access control filter. HASE 2016 : 17th International Symposium on High-Assurance Systems Engineering, Jan 2016, Orlando, Florida, United States. pp.173 - 180, ⟨10.1109/HASE.2016.10⟩. ⟨hal-01298113⟩
123 View
0 Download

Altmetric

Share

Gmail Mastodon Facebook X LinkedIn More