{"id":"https://openalex.org/W32130359","doi":null,"title":"RBAC/MAC Security Analysis and Design for UML.","display_name":"RBAC/MAC Security Analysis and Design for UML.","publication_year":2004,"publication_date":"2004-01-01","ids":{"openalex":"https://openalex.org/W32130359","mag":"32130359"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.87.8745","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.87.8745","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://ce.sharif.edu/~rezaeeyan/pdf/Ifip2004Draft- RBACMAC Security Analysis and Design for UML.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113676769","display_name":"Thuong Doan","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thuong Doan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063737128","display_name":"Steven A. Demurjian","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven A. Demurjian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062180310","display_name":"Charles E. Phillips","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Charles E. Phillips","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5113033663","display_name":"T. C. Ting","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"T. C. Ting","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00684854,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"189","last_page":"203"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"role-based access control","score":0.9980000257492065},{"id":"https://openalex.org/keywords/mandatory-access-control","display_name":"mandatory access control","score":1.0},{"id":"https://openalex.org/keywords/uml","display_name":"UML","score":0.7940000295639038},{"id":"https://openalex.org/keywords/security-requirements-analysis","display_name":"security requirements analysis","score":0.7680000066757202},{"id":"https://openalex.org/keywords/use-case-diagrams","display_name":"use case diagrams","score":0.8040000200271606},{"id":"https://openalex.org/keywords/class-diagrams","display_name":"class diagrams","score":0.9990000128746033},{"id":"https://openalex.org/keywords/security-modeling","display_name":"security modeling","score":0.40299999713897705},{"id":"https://openalex.org/keywords/security-assurance","display_name":"security assurance","score":0.4519999921321869},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.4359999895095825}],"concepts":[{"id":"https://openalex.org/C41298492","wikidata":"https://www.wikidata.org/wiki/Q4781506","display_name":"Applications of UML","level":4,"score":0.7944008708000183},{"id":"https://openalex.org/C146939238","wikidata":"https://www.wikidata.org/wiki/Q2467310","display_name":"UML tool","level":4,"score":0.7762670516967773},{"id":"https://openalex.org/C202446494","wikidata":"https://www.wikidata.org/wiki/Q664166","display_name":"Class diagram","level":4,"score":0.7670914530754089},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.748818576335907},{"id":"https://openalex.org/C145644426","wikidata":"https://www.wikidata.org/wiki/Q169411","display_name":"Unified Modeling Language","level":3,"score":0.6619798541069031},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.6492294669151306},{"id":"https://openalex.org/C153185123","wikidata":"https://www.wikidata.org/wiki/Q1391624","display_name":"Sequence diagram","level":4,"score":0.5570178627967834},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.48871898651123047},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.4804627299308777},{"id":"https://openalex.org/C133264317","wikidata":"https://www.wikidata.org/wiki/Q1397689","display_name":"Object Constraint Language","level":5,"score":0.44629204273223877},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4271087348461151},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.28641730546951294},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1739884316921234}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.87.8745","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.87.8745","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://ce.sharif.edu/~rezaeeyan/pdf/Ifip2004Draft- RBACMAC Security Analysis and Design for UML.pdf","raw_type":"text"},{"id":"mag:32130359","doi":null,"is_oa":false,"landing_page_url":"https://dblp.uni-trier.de/db/conf/dbsec/dbsec2004.html#DoanDPT04","pdf_url":null,"source":{"id":"https://openalex.org/S4306507592","display_name":"DBSec","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"DBSec","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W193645769","https://openalex.org/W1510628147","https://openalex.org/W1524147119","https://openalex.org/W1580398291","https://openalex.org/W1772852352","https://openalex.org/W1988493586","https://openalex.org/W1998109675","https://openalex.org/W2015019160","https://openalex.org/W2043723411","https://openalex.org/W2058451842","https://openalex.org/W2099293367","https://openalex.org/W2105706607","https://openalex.org/W2134296086","https://openalex.org/W2139907081","https://openalex.org/W2148952798","https://openalex.org/W2149185259","https://openalex.org/W2154765153","https://openalex.org/W2159765281","https://openalex.org/W2180985473"],"related_works":["https://openalex.org/W89695427","https://openalex.org/W7099447522","https://openalex.org/W4238259794","https://openalex.org/W2043723411","https://openalex.org/W170960344","https://openalex.org/W7099706414","https://openalex.org/W7095380037","https://openalex.org/W1505416221","https://openalex.org/W102886386","https://openalex.org/W149053102"],"abstract_inverted_index":{"In":[0,73,127,170],"software":[1,71,207],"construction,":[2],"analysis":[3,51,174],"investigates":[4],"the":[5,47,58,80,86,96,107,113,154,176,200,211,222,229],"boundary":[6],"of":[7,50,88,110,156,191,202,215,224],"a":[8,19,31,63,189],"system":[9,40,91],"(scope":[10],"and":[11,15,17,52,69,99,103,117,140,148,162,164,183,197,213],"requirements),":[12],"its":[13],"usage":[14,201],"access,":[16],"from":[18],"security":[20,43,119,192],"perspective,":[21],"who":[22],"needs":[23],"access":[24,137,142],"to":[25,38,115,187,198],"what":[26],"when.":[27],"Given":[28],"sufficient":[29],"analysis,":[30],"logical":[32],"initial":[33],"solution":[34],"can":[35],"be":[36],"designed":[37],"capture":[39],"functionality":[41],"including":[42],"capabilities.":[44],"To":[45,209],"facilitate":[46],"iterative":[48],"process":[49],"design,":[53,81],"one":[54],"popular":[55],"technique":[56],"is":[57,123],"unified":[59],"modeling":[60],"language,":[61],"UML,":[62,74],"language":[64],"for":[65,85,95,106,153,166,204],"specifying,":[66],"visualizing,":[67],"constructing":[68],"documenting":[70],"artifacts.":[72],"diagrams":[75,84,94,105],"provide":[76,173],"alternate":[77],"perspectives":[78],"on":[79,221],"including:":[82],"use-case":[83,147,160],"interaction":[87],"users":[89],"with":[90,159],"components,":[92],"class":[93,149],"static":[97],"classes":[98,184],"relationships":[100],"among":[101],"them,":[102],"sequence":[104],"dynamic":[108],"behavior":[109],"objects.":[111],"However,":[112],"ability":[114],"analyze":[116],"design":[118,155],"requirements":[120],"in":[121],"UML":[122,146,168,177,203,231],"not":[124],"directly":[125],"supported.":[126],"this":[128],"paper,":[129],"we":[130,172,218],"propose":[131],"an":[132],"approach":[133],"that":[134],"incorporates":[135],"rolebased":[136],"control":[138,143],"(RBAC)":[139],"mandatory":[141],"(MAC)":[144],"into":[145,228],"diagrams,":[150,178],"providing":[151],"support":[152,188],"roles":[157],"(associated":[158],"actors),":[161],"clearances":[163],"classifications":[165],"relevant":[167],"elements.":[169],"addition,":[171],"across":[175],"as":[179],"actors,":[180],"use":[181],"cases":[182],"are":[185],"defined,":[186],"degree":[190],"assurance":[193],"(with":[194],"mutual":[195],"exclusion),":[196],"upgrade":[199],"secure":[205],"RBAC/MAC":[206,226],"design.":[208],"demonstrate":[210],"feasibility":[212],"utility":[214],"our":[216,225],"work,":[217],"briefly":[219],"report":[220],"progress":[223],"enhancements":[227],"Borland\u2019s":[230],"tool":[232],"Together":[233],"Control":[234],"Center.":[235]},"counts_by_year":[],"updated_date":"2026-09-29T14:09:16.559479","created_date":"2016-06-24T00:00:00"}