RBACvisual: A Visualization Tool for Teaching Access Control using Role-based Access Control

被引：4

作者：

Wang, Man ^{[1
]}

Mayo, Jean ^{[1
]}

Shene, Ching-Kuang ^{[1
]}

Lake, Thomas ^{[2
]}

Carr, Steve ^{[2
]}

Wang, Chaoli ^{[3
]}

机构：

[1] Michigan Technol Univ, Dept Comp Sci, Houghton, MI 49931 USA

[2] Western Michigan Univ, Dept Comp Sci, Kalamazoo, MI 49008 USA

[3] Univ Notre Dame, Dept Comp Sci & Engn, Notre Dame, IN 46556 USA

来源：

ITICSE'15: PROCEEDINGS OF THE 2015 ACM CONFERENCE ON INNOVATION AND TECHNOLOGY IN COMPUTER SCIENCE EDUCATION | 2015年

基金：

美国国家科学基金会;

关键词：

Security; visualization;

D O I：

10.1145/2729094.2742627

中图分类号：

TP301 [理论、方法];

学科分类号：

081202 ;

摘要：

This paper presents RBACvisual, a user-level visualization tool designed to facilitate the study and teaching of the role-based access control (RBAC) model, which has been widely used in companies to restrict access to authorized users. RBACvisual provides two graphical abstractions of the underlying specification. Policies can be input and modified graphically or using text-based files. Students can use an embedded Query system to answer commonly asked questions and to test their understanding of a given policy. A Practice subsystem is also provided for instructors to assign quizzes to students; the answers can be sent to the instructor via email. We also present the results of an evaluation of RBACvisual within a senior-level course on information security. The student feedback was positive and indicated that RBACvisual helped students understand the model and enhanced the course.

引用

页码：141 / 146

页数：6

共 50 条

[11] Fuzzy Role-Based Access Control
Martinez-Garcia, Carles
Navarro-Arribas, Guillermo
Borrell, Joan
INFORMATION PROCESSING LETTERS, 2011, 111 (10) : 483 - 487
[12] Delegation in role-based access control
Crampton, Jason
Khambhammettu, Hemanth
INTERNATIONAL JOURNAL OF INFORMATION SECURITY, 2008, 7 (02) : 123 - 136
[13] Role-based access control in JavaTM
Fondazione Ugo Bordoni, Roma, Italy
Proceedings of the ACM Workshop on Role-Based Access Control, 1998, : 91 - 100
[14] Migrating to role-based access control
Brooks, K
FOURTH ACM WORKSHOP ON ROLE-BASED ACCESS CONTROL, PROCEEDINGS, 1999, : 71 - 81
[15] Study of Role-based Access Control
Cao Yonghui
EBM 2010: INTERNATIONAL CONFERENCE ON ENGINEERING AND BUSINESS MANAGEMENT, VOLS 1-8, 2010, : 5209 - 5212
[16] Delegation in role-based access control
Crampton, Jason
Khambhammettu, Hemanth
COMPUTER SECURITY - ESORICS 2006, PROCEEDINGS, 2006, 4189 : 174 - +
[17] Role-based access control on the web using LDAP
Park, JS
Ahn, GJ
Sandhu, R
DATABASE AND APPLICATION SECURITY XV, 2002, 87 : 19 - 30
[18] Using NFS to implement role-based access control
Gustafsson, M
Deligny, B
Shahmehri, N
SIXTH IEEE WORKSHOPS ON ENABLING TECHNOLOGIES: INFRASTRUCTURE FOR COLLABORATIVE ENTERPRISES, PROCEEDINGS, 1997, : 299 - 304
[19] Role-based access control using neural network
Chae, SH
Kim, W
Kim, DK
7TH WORLD MULTICONFERENCE ON SYSTEMICS, CYBERNETICS AND INFORMATICS, VOL II, PROCEEDINGS: COMPUTER SCIENCE AND ENGINEERING, 2003, : 36 - 40
[20] An application using role-based access control model
Wang, G
Cong, B
Chen, N
Lan, M
Yan, HT
PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON PARALLEL AND DISTRIBUTED PROCESSING TECHNIQUES AND APPLICATIONS, VOLS I-V, 2000, : 369 - 375

← 1 2 3 4 5 →