Towards model-driven development of access control policies for web applications
- M. Busch
- N. Koch
- M. Masi
- R. Pugliese
- F. Tiezzi
Publication date
January 2012
DOI Publisher
Association for Computing Machinery (ACM)Abstract
We introduce a UML-based notation for graphically modeling systems' security aspects in a simple and intuitive way and a model-driven process that transforms graphical specifications of access control policies in XACML. These XACML policies are then translated in FACPL, a policy language with a formal semantics, and the resulting policies are evaluated by means of a Java-based software tool
Add to ORKG