@inproceedings{be1b348cca6f4b1d87aa02b68e5cf3cd,
title = "A model-driven approach for the specification and analysis of access control policies",
abstract = "The last years have seen the definition of many languages, models and standards tailored to specify and enforce access control policies, but such frameworks do not provide methodological support during the policy specification process. In particular, they do not provide facilities for the analysis of the social context where the system operates. In this paper we propose a model-driven approach for the specification and analysis of access control policies. We build this framework on top of SI*, a modeling language tailored to capture and analyze functional and security requirements of socio-technical systems. The framework also provides formal mechanisms to assist policy writers and system administrators in the verification of access control policies and of the actual user-permission assignment. {\textcopyright} 2008 Springer Berlin Heidelberg.",
author = "F. Massacci and N. Zannone",
year = "2008",
doi = "10.1007/978-3-540-88873-4_11",
language = "English",
isbn = "9783540888727",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "1087--1103",
editor = "Z. Tari and R. Meersman",
booktitle = "On the Move to Meaningful Internet Systems: OTM 2008 - OTM 2008 Confederated International Conferences CoopIS, DOA, GADA, IS, and ODBASE 2008,Proceedings",
note = "OTM 2008 Confederated International Conferences CoopIS, DOA, GADA, IS, and ODBASE 2008 ; Conference date: 09-11-2008 Through 14-11-2008",
}