|
|
|
Requirements-Based Access Control Analysis and Policy Specification
Qingfeng He
Ph.D. Candidate
Department of Computer Science
North Carolina State University
Date : Tuesday, March 22, 2005
Time : 10:30 - 11:30 a.m.
Location : Science & Tech II, Room 430A
Abstract:
Access control is a mechanism for achieving confidentiality and integrity in
software systems. Access control policies (ACPs) are security requirements
that define how access is managed and the high-level rules of who can access
what information, under what conditions. Traditionally, access control
policies are often specified after a system is designed and deployed.
Because ACP specification is typically isolated from requirements
analysis, it may result in policies that are not in compliance with system
requirements. In this talk, a Requirements-based access Control Analysis and
Policy Specification (ReCAPS) approach for deriving ACPs from various
information sources will be presented. ReCAPS provides prescriptive
guidance for how to specify both function-level and database-level ACPs.
It helps clarify ambiguities, resolve conflicts, and provides traceability
support, ensuring consistency among software artifacts.
Bio: Qingfeng He is a PhD candidate in the Computer Science department at North
Carolina State University, where he is a member of the Cyber Defense Lab
and The Privacy Place research group. His research interests include
software requirements engineering, security and privacy requirements, and
policy specification. Qingfeng won the CISCO Systems Information Assurance
Scholarship in Spring 2005. He has a BE and an ME in electrical
engineering from Tsinghua University, China. He is a student member of the
ACM and the IEEE.
Seminar Point of Contact: Prof. Francesco Parisi-Presicce
The Information Assurance Scholarship
Program is open to U.S. Citizens pursuing undergraduate, masters,
and doctoral degrees from the Centers of Academic Excellence in
Information Assurance Education
Copyright © 1994-2004 Center for Secure Information Systems, George Mason University.
|