Security Description Summary

The metamodel of a role-based access control model.

Specurity Aspects

Name

Description

Specification of RBAC constraints, permissions and roles in relation to sessions.

Specification Elements

Name

Description

A set of users.

A set of roles.

A set of sessions.

A set of operations.

A set of objects.

A relationship between operations and objects.

Security Aspects
- RBAC
  Specification of RBAC constraints, permissions and roles in relation to sessions.
  Specification Elements:
  Roles
  Users
  Sessions
  OBS
  OPS
  Constraints
  Threats:
  Spoofing
  Tampering with Data
  Information Disclosure
  Elevation of Privileges
Specification Elements
- Users
  A set of users.
  Applies to:
  Entity
- Roles
  A set of roles.
  Applies to:
  Entity
  Activity
- Sessions
  A set of sessions.
  Applies to:
  State
- OPS
  A set of operations.
  Applies to:
  Activity
- OBS
  A set of objects.
  Applies to:
  Data
- Constraints
  A relationship between operations and objects.
  Applies to:
  InformationFlow
  ControlFlow