JaCoWeb-ABC: Integração do Modelo de Controle de Acesso UCONABC no CORBASec
Resumo
A arquitetura JaCoWeb-ABC é uma extensão da especificação CORBASec que aplica o modelo de controle de acesso UCONABC à sua camada de segurança. O JaCoWeb-ABC define um controle de acesso configurável, que trabalha com políticas de autorização, obrigação e condição definidas pelo administrador do sistema. Estas políticas de segurança podem ser definidas de duas formas, a primeira totalmente transparente para a aplicação e a segunda que possibilita trabalhar em conjunto com a aplicação. A combinação dessas duas funcionalidades irá definir um modelo de controle de acesso muito mais preciso e rigoroso sobre as ações dos usuários em um sistema.
Referências
R. Sandhu. "Lattice-based access control models". IEEE Computer, 26(11) 9-19, November 1993
D. D. Downs, J. R. Rub, K. C. Kung, and C. S. Jordan. "Issues in Discretionary Access Control". In: Proceedings of the 1985 IEEE Symposium on Security and Privacy, pp. 208-218, April 1985.
R. Sandhu, "Role-Based Access Control," Advances in Computer Science, vol. 46, Academic Press, 1998.
J. Park and R. Sandhu, "The UCONABC Usage Control Model". ACM Transactions on Information and System Security (TISSEC), Feb. 2004
R. Sandhu and J. Park. "Usage Control: A Vision for Next Generation Access Control". 2nd International Workshop Mathematical Methods, Models and Architectures for Computer Networks Security (MMM-ACNS), 2003, St. Petersburg, Russia.
X. Zhang, J. Park, F. Parisi-Presicce and R. Sandhu. "A Logical Specification for Usage Control". 9th ACM Symposium on Access Control Models and Technologies, 2004.
Object Management Group. The Common Object Request Broker 2.0/IIOP Specification, Revision 2.0. OMG Document 96-08-04, 1996.
OMG. Security Service Specification, v1.8. OMG Doc. 02-03-11, Mar. 2002
C. M. Westphall e J. S. Fraga. "A Large-Scale System Authorization Scheme Proposal Integrating Java, CORBA and Web Security Models and a Discretionary Prototype". Proc. IEEE LANOMS'99, p. 14-25, dezembro de 1999.
Obelheiro, R. R. e Fraga, J. S. Role-Based Access Control for CORBA Distributed Object Systems 7th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems (WORDSí2002), 2002, San Diego, CA.
C. M. Westphall, J. S. Fraga, C. B. Westphall e S. C. S. Bianchi. "Políticas de Segurança Obrigatórias: Bell e Lapadula no CORBAsec". XX SBRC, p. 846-861. Búzios, RJ, 2002.
G. Brose. "JacORB: Implementation and Design of a Java ORB". Proc. IFIP DAIS'97, Cottbus, Germany, Chapman & Hall, Sep. 1997.
OMG. Resource Access Decision Facility, v1.0. OMG Doc. 99-03-02, Mar. 1999
Damianou et al. "The Ponder Policy Specification Language". Proceedings of the Workshop on Policies for Distributed Systems and Networks. 2001
Q. He. Privacy Enforcement with an Extended Role-Based Access Control Model. North Carolina State University Computer Science TR-2003-09. 2003.
D. D. Downs, J. R. Rub, K. C. Kung, and C. S. Jordan. "Issues in Discretionary Access Control". In: Proceedings of the 1985 IEEE Symposium on Security and Privacy, pp. 208-218, April 1985.
R. Sandhu, "Role-Based Access Control," Advances in Computer Science, vol. 46, Academic Press, 1998.
J. Park and R. Sandhu, "The UCONABC Usage Control Model". ACM Transactions on Information and System Security (TISSEC), Feb. 2004
R. Sandhu and J. Park. "Usage Control: A Vision for Next Generation Access Control". 2nd International Workshop Mathematical Methods, Models and Architectures for Computer Networks Security (MMM-ACNS), 2003, St. Petersburg, Russia.
X. Zhang, J. Park, F. Parisi-Presicce and R. Sandhu. "A Logical Specification for Usage Control". 9th ACM Symposium on Access Control Models and Technologies, 2004.
Object Management Group. The Common Object Request Broker 2.0/IIOP Specification, Revision 2.0. OMG Document 96-08-04, 1996.
OMG. Security Service Specification, v1.8. OMG Doc. 02-03-11, Mar. 2002
C. M. Westphall e J. S. Fraga. "A Large-Scale System Authorization Scheme Proposal Integrating Java, CORBA and Web Security Models and a Discretionary Prototype". Proc. IEEE LANOMS'99, p. 14-25, dezembro de 1999.
Obelheiro, R. R. e Fraga, J. S. Role-Based Access Control for CORBA Distributed Object Systems 7th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems (WORDSí2002), 2002, San Diego, CA.
C. M. Westphall, J. S. Fraga, C. B. Westphall e S. C. S. Bianchi. "Políticas de Segurança Obrigatórias: Bell e Lapadula no CORBAsec". XX SBRC, p. 846-861. Búzios, RJ, 2002.
G. Brose. "JacORB: Implementation and Design of a Java ORB". Proc. IFIP DAIS'97, Cottbus, Germany, Chapman & Hall, Sep. 1997.
OMG. Resource Access Decision Facility, v1.0. OMG Doc. 99-03-02, Mar. 1999
Damianou et al. "The Ponder Policy Specification Language". Proceedings of the Workshop on Policies for Distributed Systems and Networks. 2001
Q. He. Privacy Enforcement with an Extended Role-Based Access Control Model. North Carolina State University Computer Science TR-2003-09. 2003.
Publicado
26/09/2005
Como Citar
HIGASHIYAMA, Marcelo Shinji; LUNG, Lau Cheuk; OBELHEIRO, Rafael R. M.; FRAGA, Joni da S..
JaCoWeb-ABC: Integração do Modelo de Controle de Acesso UCONABC no CORBASec. In: SIMPÓSIO BRASILEIRO DE SEGURANÇA DA INFORMAÇÃO E DE SISTEMAS COMPUTACIONAIS (SBSEG), 5. , 2005, Florianópolis.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2005
.
p. 188-201.
DOI: https://doi.org/10.5753/sbseg.2005.21532.
