Model-Driven Integration and Analysis of Access-control Policies in Multi-layer Information Systems

Salvador Martínez (1, 2, 3) , Joaquin Garcia-Alfaro (4) , Frédéric Cuppens (5, 6, 7) , Nora Cuppens-Bouhlahia (5, 6) , Jordi Cabot (1, 2)

1 ATLANMOD - Modeling Technologies for Software Production, Operation, and Evolution
2 LINA - Laboratoire d'Informatique de Nantes Atlantique
3 Mines Nantes - Mines Nantes
4 TSP - RST - Département Réseaux et Services de Télécommunications
5 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l'Information
6 Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance
7 Lab-STICC_TB_CID_SFIIS

Security is a critical concern for any information system. Security properties such as confidentiality, integrity and availability need to be enforced in order to make systems safe. In complex environments, where information systems are composed of a number of heterogeneous subsystems, each must participate in their achievement. Therefore, security integration mechanisms are needed in order to 1) achieve the global security goal and 2) facilitate the analysis of the security status of the whole system. For the specific case of access-control, access-control policies may be found in several components (databases, networks and applications) all, supposedly, working together in order to meet the high level security property. In this work we propose an integration mechanism for access-control policies to enable the analysis of the system security. We rely on model-driven technologies and the XACML standard to achieve this goal.

Mots clés: access-control; Model-driven engineering; Security

Domaines: Génie logiciel [cs.SE]

Salvador Martínez, Joaquin Garcia-Alfaro, Frédéric Cuppens, Nora Cuppens-Bouhlahia, Jordi Cabot. Model-Driven Integration and Analysis of Access-control Policies in Multi-layer Information Systems. 30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. pp.218-233, ⟨10.1007/978-3-319-18467-8_15⟩. ⟨hal-01152528⟩