When Role Models Have Flaws: Static Validation of Enterprise Security Policies
Authors:
- 1 May 2007
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 02705257,p. 478-488
Abstract
Modern multiuser software systems have adopted role-based access control (RBAC) for authorization management. This paper presents a formal model for RBAC policy validation and a static-analysis model for RBAC systems that can be used to (i) identify the roles required by users to execute an enterprise application, (ii) detect potential inconsistencies caused by principal-delegation policies, which are used to override a user's role assignment, (Hi) report if the roles assigned to a user by a given policy are redundant or insufficient, and (iv) report vulnerabilities that can result from unchecked intra-component accesses. The algorithms described in this paper have been implemented as part of IBM's enterprise security policy evaluator (ESPE) tool. Experimental results show that the tool found numerous policy flaws, including ten previously unknown flaws from two production-level applications, with no false-positive reports.Keywords
This publication has 14 references indexed in Scilit:
- When Role Models Have Flaws: Static Validation of Enterprise Security Policies2007
- Role-Based access control consistency validation2006
- XML access control using static analysis2003
- AlloyACM Transactions on Software Engineering and Methodology, 2002
- A lightweight approach to specification and analysis of role-based access control extensions2002
- Analysis and testing of Web applications2001
- Alcoa2000
- Fast static analysis of C++ virtual function calls1996
- Role-based access control modelsComputer, 1996
- The protection of information in computer systemsProceedings of the IEEE, 1975