系统RBAC安全模型与其UML模型的集成  

Integration of systematic RBAC security model and UML model

作　　者：郭天文[1] 殷兆麟[1] 范宝德[2] 

机构地区：[1]中国矿业大学计算机学院,江苏徐州221008 [2]中国矿业大学机电与信息工程学院,北京100083

出　　处：《计算机工程与设计》2007年第4期789-791,共3页Computer Engineering and Design

基　　金：山东省自然科学基金项目(Y2005G13)

摘　　要：软件系统建模一般不包括安全建模,系统安全策略和安全机制往往作为开发人员在系统开发后期对系统的补充和完善的措施。这种不规范的安全需求处理方法为系统后期安全维护及系统之间的集成带来莫大隐患。阐述了系统RBAC的安全模型与系统通常UML设计模型的集成。最后结合一个实例,具体说明集成的方法与过程。The modeling of software system generally does not include security model. System security strategy and mechanism are often taken as the supplement and improvement to system in the later period of its development. This kind of nonstandard processing of security requirements brings great hidden danger for the system in later security maintenance and system integration. The integration of RBAC security model and generally UML design model is introduced. Finally, the method and the process of the integration with an example are explained specifically.

关 键 词：安全建模 基于角色的访问控制(RBAC) UML RBAC设计模式 模型集成 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]