Abstract
Security of dynamic web applications is a serious issue. While Model Driven Architecture (MDA) techniques can be used to generate applications with given access control security properties, analysis of existing web applications is more problematic. In this paper we present a model transformation technique to automatically construct a role-based access control (RBAC) security model of dynamic web applications from previously recovered structural and behavioral models. The SecureUML model generated by this technique can be used to check for security properties of the original application. We demonstrate our approach by constructing an RBAC security model of PhpBB, a popular internet bulletin board system. © 2012 Springer-Verlag.
Cite
CITATION STYLE
Alalfi, M. H., Cordy, J. R., & Dean, T. R. (2012). Recovering role-based access control security models from dynamic web applications. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 7387 LNCS, pp. 121–136). Springer Verlag. https://doi.org/10.1007/978-3-642-31753-8_9
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
