This document describes rbacUML, a tool for modeling and analyzing role-based access control (RBAC) policies on UML diagrams. The tool allows for RBAC modeling, verification of RBAC configurations for completeness and correctness, coverage analysis of access rules, satisfiability analysis, redundancy detection, and import/export from LDAP. Future research directions include secure code generation from RBAC models, automatic correction of insecure models, support for evolution and merging of models. The tool is available for download online and the author welcomes collaboration through an Open University knowledge exchange voucher program.
15. Research directions
(secure) code generation
Automatic correction of insecure models
Evolution and merging support
...
17. Get the tool
http://computing-research.open.ac.uk/rbac/
18. Knowledge Exchange Vouchers
Engage with academic partners at the OU
Up to 贈10k (your contribution: 25%)
Deadline: 31st May 2012
Projects must start before 1st July 2012