1. rbacUML: Role-Based Access
Control Verification and Analysis
on UML
Lionel Montrieux
<L.M.C.Montrieux@open.ac.uk>

2. Centre for Research in Computing
The Open University
Walton Hall
Milton Keynes
MK7 6AA
www.open.ac.uk

3. Access Control

9. rbacUML

10. Configuration

11. Business Logic

12. Business Logic (2)

13. Tests

14. Features
• RBAC modelling
• Verification
• Coverage analysis
• Completeness analysis
• Satisfiability analysis
• Redundancy detection
• LDAP import

15. Research directions
• (secure) code generation
• Automatic correction of insecure models
• Evolution and merging support
• ...

17. Get the tool
http://computing-research.open.ac.uk/rbac/

18. Knowledge Exchange Vouchers
• Engage with academic partners at the OU
• Up to £10k (your contribution: 25%)
• Deadline: 31st May 2012
• Projects must start before 1st July 2012

19. Doodles by Jessica Hardaway
Questions?