Towards model-centric engineering of a dynamic access control product line

  • Authors:
  • Mahdi Derakhshanmanesh;Mazeiar Salehie;Jürgen Ebert

  • Affiliations:
  • University of Koblenz-Landau, Koblenz, Germany;Research Centre, Limerick, Ireland;University of Koblenz-Landau, Koblenz, Germany

  • Venue:
  • Proceedings of the 16th International Software Product Line Conference - Volume 2
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Access control systems are deployed in organizations to protect critical cyber-physical assets. These systems need to be adjustable to cope with different contextual factors like changes in resources or requirements. Still, adaptation is often performed manually. In addition, different product variants of access control systems need to developed together systematically. These characteristics demand a product line engineering approach for enhanced reuse. Moreover, to cope with uncertainty at runtime, adaptivity, i.e., switching between variations in a cyber-physical domain (reconfiguration) and adjusting access policies (behavior adaptation), needs to be supported. In this position paper, we sketch an approach for engineering dynamic access control systems based on core concepts from dynamic software product lines and executable runtime models. The proposed solution is presented and first experiences are discussed along a sample dynamic software product line in the role-based access control domain.