A Model-Driven Security Requirements Approach to Deduce Security Policies Based on OrBAC

Denisse Muñante Arzapalo; Vanea Chiprianov; Laurent Gallon; Philippe Aniorte

doi:10.1007/978-3-319-16745-9_9

Conference papers

A Model-Driven Security Requirements Approach to Deduce Security Policies Based on OrBAC

Denisse Muñante Arzapalo Vanea Chiprianov ^{1, 2, 3} Laurent Gallon ³ Philippe Aniorte ³

1 Lab-STICC_TB_CID_IHSEV

Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance

2 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information

3 LIUPPA - Laboratoire Informatique de l'Université de Pau et des Pays de l'Adour

Abstract : Attacks on unsecured systems result in important loses. Many of the causes are related to non-conformance of system architecture and implementation to the requirements. To reduce these conformity problems, Model Driven Engineering proposes using modelling languages for defining requirements and architecture and model transformations between them. We therefore introduce a modelling language extension/ profile for defining system requirements with basic security requirement concepts. We also formalize the model transformation between this profile and a security formal verification method. We exemplify our approach on a medical case study. \textcopyright Springer International Publishing Switzerland 2015.

Document type :

Conference papers

Domain :

Computer Science [cs]

Complete list of metadata

https://hal-univ-pau.archives-ouvertes.fr/hal-01908073
Contributor : Julien Rabaud <>
Submitted on : Monday, October 29, 2018 - 5:44:08 PM
Last modification on : Tuesday, April 20, 2021 - 9:04:02 AM

A Model-Driven Security Requirements Approach to Deduce Security Policies Based on OrBAC

Identifiers

Collections

Citation

Export

Metrics

114

A Model-Driven Security Requirements Approach to Deduce Security Policies Based on OrBAC

Identifiers

Collections

Citation

Export

Share

Metrics

114