Semi-Automatic Generation of OrBAC Security Rules for Cooperative Organizations Using Model-Driven Engineering
Abstract
In an environment of increasing cooperation and interoperability, organizations share resources and services between them to increase their return on investment. But to control the use of shared resources, it is necessary to apply access control policies which are related to how organizations control and secure their scenarios of cooperation. In this paper, we perform a Systematic Literature Review on the current solutions to define access control policies for cooperative organizations. As a result, we identify limitations such as manual negotiation for establishing policies. To address these limitations, we introduce the Semi-Automatic Generation of Access Rules Based on OrBAC (SAGARBO) component which allows semi-automatic generation of security rules based on Model-driven engineering. This reduces negotiation time and the work of the security administrator.