Security Analysis of Temporal-RBAC Using Timed Automata

Authors:
Samrat Mondal;Shamik Sural
Affiliations:
-;-
Venue:
IAS '08 Proceedings of the 2008 The Fourth International Conference on Information Assurance and Security
Year:
2008

Citing 0
Cited 4

A Verification Framework for Temporal RBAC with Role Hierarchy (Short Paper)

ICISS '08 Proceedings of the 4th International Conference on Information Systems Security
Towards formal security analysis of GTRBAC using timed automata

Proceedings of the 14th ACM symposium on Access control models and technologies
Specification and analysis of access control policies for mobile applications

Proceedings of the 18th ACM symposium on Access control models and technologies
Enforcing spatio-temporal access control in mobile applications

Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Role Based Access Control (RBAC) is arguably the most common access control mechanism today due to its applicability at various levels of authorization in a system. Time varying nature of access control in RBAC administered systems is often implemented through Temporal-RBAC - an extension of RBAC in the temporal domain. In this paper, we propose an initial approach towards verification of security properties of a Temporal-RBAC system. Each role is mapped to a timed automaton. A controller automaton is used to activate and deactivate various roles. Security properties are specified using Computation Tree Logic (CTL) and are verified with the help of a model checking tool named Uppaal. We have specifically considered reachability, safety and liveness properties to show the usefulness of our approach.