@inproceedings{1592914df2fc495fb8f44978acdbeb65,
title = "A feature-based modeling approach for building hybrid access control systems",
abstract = "Role-Based Access Control (RBAC) and Mandatory Access Control (MAC) are widely used access control models. They are often used together in domains where both data integrity and information flow are concerned. There is much work on combined use of RBAC and MAC policies at the kernel level which focuses on enforcing hybrid policies at run-time. However there is little work on techniques for developing hybrid systems of RBAC and MAC from a development perspective. In this work we present a feature-based modeling approach for developing hybrid access control systems. In the approach RBAC and MAC are designed in terms of features and features are configured based on requirements. Configured features are then composed to produce a design model that supports hybrid access control. The approach enables systematic development of hybrid systems of RBAC and MAC and reduces development complexity and errors through need-based configuration of features in early development phases. We use a hospital system to demonstrate the approach. Tool support for the approach is also discussed.",
keywords = "Feature modeling, Hybrid access control, MAC, RBAC, UML",
author = "Sangsig Kim and Kim, \{Dae Kyoo\} and Lunjin Lu and Sooyong Park and Suntae Kim",
year = "2011",
doi = "10.1109/SSIRI.2011.16",
language = "English",
isbn = "9780769544533",
series = "Proceedings - 2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011",
pages = "88--97",
booktitle = "Proceedings - 2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011",
note = "2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011 ; Conference date: 27-06-2011 Through 29-06-2011",
}