A model-driven approach for the visual specification of Role-Based Access Control policies in web systems

Paloma Díaz; Ignacio Aedo; Daniel Sanz; Alessio Malizia

doi:10.1109/VLHCC.2008.4639087

A model-driven approach for the visual specification of Role-Based Access Control policies in web systems

Paloma Díaz, Ignacio Aedo, Daniel Sanz, Alessio Malizia

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

6 Citations (Scopus)

Abstract

Specifying the access policy of a web system is a relevant design concern that is often dismissed or postponed until the implementation. ADM-RBAC (Ariadne Development Method with Role-Based Access Control) is a model-driven approach for web systems that supports the specification of access control policies in an integrated way and at two abstraction levels. At the conceptual level a number of visual models specify the access policy in a way that is similar to the users' point of view. At the detailed level, models are oriented towards providing enough details to generate prototypes in an automatic or semiautomatic way. In this paper we describe the visual models of ADM-RBAC and their empirical evaluation.

Original language	English
Title of host publication	Proceedings - 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008
Pages	203-210
Number of pages	8
DOIs	https://doi.org/10.1109/VLHCC.2008.4639087
Publication status	Published - 2008
Event	2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008 - Herrsching am Ammersee, Germany Duration: 15 Sept 2008 → 19 Sept 2008

Conference

Conference	2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008
Country/Territory	Germany
City	Herrsching am Ammersee
Period	15/09/08 → 19/09/08

Access to Document

10.1109/VLHCC.2008.4639087

Cite this

@inproceedings{abddad54c1e64f30836b532a5946dea9,

title = "A model-driven approach for the visual specification of Role-Based Access Control policies in web systems",

abstract = "Specifying the access policy of a web system is a relevant design concern that is often dismissed or postponed until the implementation. ADM-RBAC (Ariadne Development Method with Role-Based Access Control) is a model-driven approach for web systems that supports the specification of access control policies in an integrated way and at two abstraction levels. At the conceptual level a number of visual models specify the access policy in a way that is similar to the users' point of view. At the detailed level, models are oriented towards providing enough details to generate prototypes in an automatic or semiautomatic way. In this paper we describe the visual models of ADM-RBAC and their empirical evaluation.",

author = "Paloma D{\'i}az and Ignacio Aedo and Daniel Sanz and Alessio Malizia",

year = "2008",

doi = "10.1109/VLHCC.2008.4639087",

language = "English",

isbn = "9781424425280",

pages = "203--210",

booktitle = "Proceedings - 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008",

note = "2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008 ; Conference date: 15-09-2008 Through 19-09-2008",

}

Díaz, P, Aedo, I, Sanz, D & Malizia, A 2008, A model-driven approach for the visual specification of Role-Based Access Control policies in web systems. in Proceedings - 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008., 4639087, pp. 203-210, 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008, Herrsching am Ammersee, Germany, 15/09/08. https://doi.org/10.1109/VLHCC.2008.4639087

TY - GEN

T1 - A model-driven approach for the visual specification of Role-Based Access Control policies in web systems

AU - Díaz, Paloma

AU - Aedo, Ignacio

AU - Sanz, Daniel

AU - Malizia, Alessio

PY - 2008

Y1 - 2008

N2 - Specifying the access policy of a web system is a relevant design concern that is often dismissed or postponed until the implementation. ADM-RBAC (Ariadne Development Method with Role-Based Access Control) is a model-driven approach for web systems that supports the specification of access control policies in an integrated way and at two abstraction levels. At the conceptual level a number of visual models specify the access policy in a way that is similar to the users' point of view. At the detailed level, models are oriented towards providing enough details to generate prototypes in an automatic or semiautomatic way. In this paper we describe the visual models of ADM-RBAC and their empirical evaluation.

AB - Specifying the access policy of a web system is a relevant design concern that is often dismissed or postponed until the implementation. ADM-RBAC (Ariadne Development Method with Role-Based Access Control) is a model-driven approach for web systems that supports the specification of access control policies in an integrated way and at two abstraction levels. At the conceptual level a number of visual models specify the access policy in a way that is similar to the users' point of view. At the detailed level, models are oriented towards providing enough details to generate prototypes in an automatic or semiautomatic way. In this paper we describe the visual models of ADM-RBAC and their empirical evaluation.

UR - http://www.scopus.com/inward/record.url?scp=56349094389&partnerID=8YFLogxK

U2 - 10.1109/VLHCC.2008.4639087

DO - 10.1109/VLHCC.2008.4639087

M3 - Conference contribution

AN - SCOPUS:56349094389

SN - 9781424425280

SP - 203

EP - 210

BT - Proceedings - 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008

T2 - 2008 IEEE Symposium on Visual Languages and Human-Centric Computing, VL/HCC 2008

Y2 - 15 September 2008 through 19 September 2008

ER -

A model-driven approach for the visual specification of Role-Based Access Control policies in web systems

Abstract

Conference

Access to Document

Other files and links

Fingerprint

Cite this