Model-driven Verification and Evolution of Role-Based

Access Control Properties

Lionel MontrieuxL.M.C.Montrieux@open.ac.uk

Supervisors: M. Wermelinger, Y. YuAcknowledgements: C. Haley, J. Jürjens

CRC conference, 2010

Model-driven Development

Access Control

Step-by-step

Evolution

Merging

Code Generation

Conclusion

Choice ofgeneration

method

OO generation

AO generation

Java code

Java and AspectJ code

Java Authentication and Authorization Service

framework

UMLsec model Verification

[NO]

[YES]

[YES]UMLsec model Verification

[NO] Merging

UMLsec model Verification

[NO]

[YES]

Images credits

•Sydney opera house model –

Peter Lindberg -

CC-by•Visa card -

Declan Jewell –

CC-by•Darwin memorial –

Stephen R. Edwards -

CC-by-nc-sa•Merge sign –

Simon Greig

-

CC-by-nc-sa•Battersea power plant –

spacebahr

(flickr.com) -

CC-by-nc