2020
DOI: 10.1007/978-3-030-48077-6_15
|View full text |Cite
|
Sign up to set email alerts
|

Verifying SGAC Access Control Policies: A Comparison of ProB, Alloy and Z3

Abstract: This paper describes the formalisation of SGAC access control policies using Z3 and then we compare the performance with ProB and Alloy. SGAC is an attribute-based, fine-grain access control model that uses acyclic subject and resource graphs to provide rule inheritance and streamline policy specification. To ensure patient privacy and safety, four types of properties are checked: accessibility, availability, contextuality and rule effectiveness. Automatic translation of SGAC policies into each specification l… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1

Citation Types

0
1
0

Year Published

2023
2023
2023
2023

Publication Types

Select...
1

Relationship

0
1

Authors

Journals

citations
Cited by 1 publication
(1 citation statement)
references
References 4 publications
0
1
0
Order By: Relevance
“…of modeling practices using these and related languages (e.g., [14], [15], [16], [17]) and university courses that teach some of these languages (e.g., [18], [19], [20], [21]). Ball and Zorn [22] advocate for the importance of teaching software engineering students to model at this level of description.…”
Section: Introductionmentioning
confidence: 99%
“…of modeling practices using these and related languages (e.g., [14], [15], [16], [17]) and university courses that teach some of these languages (e.g., [18], [19], [20], [21]). Ball and Zorn [22] advocate for the importance of teaching software engineering students to model at this level of description.…”
Section: Introductionmentioning
confidence: 99%