Take a sneak peek at the new NIST.gov and let us know what you think!
(Please note: some content may not be complete on the beta site.).

View the beta site
NIST logo

Publication Citation: Property Verification for Generic Access Control Models

NIST Authors in Bold

Author(s): Chung Tong Hu; David R. Kuhn; Tao Xie;
Title: Property Verification for Generic Access Control Models
Published: December 20, 2008
Abstract: To formally and precisely capture the security properties that access control should adhere to, access control models are usually written to bridge the rather wide gap in abstraction between policies and mechanisms. In this paper, we propose a new general approach for property verification for access control models. The approach defines a standardized structure for access control models, providing for both property verification and automated generation of test cases. The approach expresses access control models in the specification language of a model checker and expresses generic access control properties in the property language. Then the approach uses the model checker to verify these properties for the access control models and generates test cases via combinatorial covering array for the system implementations of the models.
Conference: 2008 IEEE/IFIP International Symposium on Trust, Security, and Privacy for Pervasive Applications (TSP-08)
Proceedings: Proceedings of the 5th International Conference on Embedded and Ubiquitous Computing (EUC 2008)
Volume: 2
Pages: pp. 243 - 250
Location: Shanghai, -1
Dates: December 17-20, 2008
Keywords: access control, combinatorial testing, modeling, software assurance
Research Areas: Computer Security, Cybersecurity
DOI: http://dx.doi.org/10.1109/EUC.2008.22  (Note: May link to a non-U.S. Government webpage)
PDF version: PDF Document Click here to retrieve PDF version of paper (121KB)