Logo des Repositoriums
 
Konferenzbeitrag

A UML extension for modeling break-glass policies

Lade...
Vorschaubild

Volltext URI

Dokumententyp

Text/Conference Paper

Zusatzinformation

Datum

2012

Zeitschriftentitel

ISSN der Zeitschrift

Bandtitel

Verlag

Gesellschaft für Informatik e.V.

Zusammenfassung

In emergency situations, certain subjects sometimes have to perform important tasks although they are usually not authorized to perform these tasks. Break-glass policies have been introduced as a sophisticated exception handling mechanism to resolve such situations. They enable selected subjects to break or override the standard access control policies of an information system in a controlled manner. However, modeling support for break-glass policies is largely missing. In this paper, we present an approach to provide modeling support for break-glass policies in the context of process-related RBAC models. In particular, we provide a UML2 extension that allows for the integrated modeling of processes and break-glass policies. Additional constraints are formally specified via OCL. We also implemented our approach as an extension to the BusinessActivity library and runtime engine. The source code of our implementation is available for download.

Beschreibung

Schefer-Wenzl, Sigrid; Strembeck, Mark (2012): A UML extension for modeling break-glass policies. EMISA 2012 – Der Mensch im Zentrum der Modellierung. Bonn: Gesellschaft für Informatik e.V.. PISSN: 1617-5468. ISBN: 978-3-88579-600-8. pp. 25-38. Regular Research Papers. Wien, Österreich. 13.-14. September 2012

Schlagwörter

Zitierform

DOI

Tags