Role-based Access Control Security policy Abstract Syntax Trees Critical properties
Issue Date:
2009
Publisher:
KSE 2009 - The 1st International Conference on Knowledge and Systems Engineering
Citation:
Page : 215-219
Abstract:
Security policy is a critical property in software applications which require high levels of safety
and security. It has to be clearly specified in requirement documents and its implementation must be
conformed to the specification. In this paper, we propose an approach to check if the implementation is in
accordance with its security policy specification. We use the Abstract Syntax Tree (AST), another manner of
expressing the program, to analyze the source code and specify user permission policy in software systems
by Role-Based Access Control (RBAC). ?? 2009 IEEE.
