The University of Southampton
University of Southampton Institutional Repository

VAC - verifier of administrative role-based access control policies

Ferrara, Anna Lisa, Madhusudan, P., Lam Nguyen, Truc and Parlato, Gennaro (2014) VAC - verifier of administrative role-based access control policies At 26th International Conference on Computer Aided Verification (CAV 2014), Austria. 18 - 22 Jul 2014. 8 pp.

Record type: Conference or Workshop Item (Paper)

Abstract

In this paper we present Vac, an automatic tool for verifying security properties of administrative Role-based Access Control (RBAC). RBAC has become an increasingly popular access control model, particularly suitable for large organizations, and it is implemented in several software. Automatic security analysis of administrative RBAC systems is recognized as an important problem, as an analysis tool can help designers check whether their policies meet expected security properties. Vac converts administrative RBAC policies to imperative programs that simulate the policies both precisely and abstractly and supports several automatic verification back-ends to analyze the resulting programs. In this paper, we describe the architecture of Vac and overview the analysis techniques that have been implemented in the tool. We also report on experiments with several benchmarks from the literature.

PDF VAC14.pdf - Accepted Manuscript
Download (139kB)

More information

Published date: July 2014
Venue - Dates: 26th International Conference on Computer Aided Verification (CAV 2014), Austria, 2014-07-18 - 2014-07-22
Organisations: Electronic & Software Systems

Identifiers

Local EPrints ID: 365363
URI: http://eprints.soton.ac.uk/id/eprint/365363
PURE UUID: 46d34fb8-63bb-4358-9351-1fcd59b967d6

Catalogue record

Date deposited: 03 Jun 2014 08:46
Last modified: 18 Jul 2017 02:22

Export record

Contributors

Author: Anna Lisa Ferrara
Author: P. Madhusudan
Author: Truc Lam Nguyen
Author: Gennaro Parlato

University divisions

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton: eprints@soton.ac.uk

ePrints Soton supports OAI 2.0 with a base URL of http://eprints.soton.ac.uk/cgi/oai2

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.

×