Incremental development of RBAC-controlled E-marking system using the B method

AutorAl-Hadhrami, Nasser; Aziz, Benjamin; Sardesai, Shantanu; Othmane, Lotfi ben
ArtConference Paper
AbstraktRole-based Access Control (RBAC) models are access policies that associate access rights to roles of subjects on objects. The incremental development of software by adding new features and the insertion of new access rules potentially render the model inconsistent and create security flaws. This paper proposes modeling (RBAC) models using the B language such that it is possible to reevaluate the consistency of the models following model changes. It shows the mechanism of formalizing (RBAC) policies of an Electronic Marking System (EMS) using B specifications and illustrates the verification of the consistency of the (RBAC) specification, using model checking and proof obligations.
KonferenzInternational Conference on Availability, Reliability and Security (ARES) <10, 2015, Toulouse>
ReferenzInstitute of Electrical and Electronics Engineers -IEEE-: 10th International Conference on Availability, Reliability and Security, ARES 2015. Proceedings: 24-28 August 2015, Toulouse, France. Los Alamitos, Calif.: IEEE Computer Society Conference Publishing Services (CPS), 2015, pp. 532-539