A Verification Framework for Access Control in Dynamic Web Applications (2009)
by
Manar H. Alalfi
,
James R. Cordy
,
Thomas R. Dean
| Venue: | In Canadian Conf. on Computer Science and Software Eng |
| Citations: | 2 - 2 self |
BibTeX
@INPROCEEDINGS{Alalfi09averification,
author = {Manar H. Alalfi and James R. Cordy and Thomas R. Dean},
title = {A Verification Framework for Access Control in Dynamic Web Applications},
booktitle = {In Canadian Conf. on Computer Science and Software Eng},
year = {2009},
pages = {109--113}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
This paper proposes a security analysis framework for dynamic web applications. A reverse engineering process is performed over a dynamic web application to extract a rolebased access control security model. A formal analysis is applied on the recovered model to check access control security properties. This framework can be used to verify that a dynamic web application conforms to access control polices specified by a security engineer.
