modeldrivensecurity docsec2002 - · pdf file2,qwhudfwlyh2emhfwv6 riwzduh*...

8
1 7+(,7$5&+,7(&785(352)(66,21$/6 0RGHO’ULYHQ6HFXULW\ 0RGHO’ULYHQ6HFXULW\ ’U0DUWLQ%XFKKHLW ’U%HUQKDUG+ROOXQGHU 7RUVWHQ/RGGHUVWHGW 2 2YHUYLHZ 2YHUYLHZ &RPSDQ\2YHUYLHZ 0RGHO’ULYHQ$UFKLWHFWXUH0’$ f *RDOVDQGEHQHILWV 0RGHO’ULYHQ6HFXULW\ f 80/PRGHOLQJVW\OHIRUUROHEDVHGDFFHVVFRQWURO f 0DSSLQJ80/PRGHOVWRD-(((-%LQIUDVWUXFWXUH f 0RGHO’ULYHQ6HFXULW\ZLWK$UF6W\OHU )XWXUHZRUN

Upload: vanhanh

Post on 12-Feb-2018

213 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

1

7+(�,7�$5&+,7(&785(�352)(66,21$/6

0RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\'U��0DUWLQ�%XFKKHLW

'U��%HUQKDUG�+ROOXQGHU7RUVWHQ�/RGGHUVWHGW

��,QWHUDFWLYH�2EMHFWV�6RIWZDUH�± LQIR#LR�VRIWZDUH�FRP

22YHUYLHZ2YHUYLHZ� &RPSDQ\�2YHUYLHZ�0RGHO�'ULYHQ�$UFKLWHFWXUH��0'$�

f*RDOV�DQG�EHQHILWV�0RGHO�'ULYHQ�6HFXULW\

f80/�PRGHOLQJ�VW\OH�IRU�UROH�EDVHG�DFFHVV�FRQWUROf0DSSLQJ�80/�PRGHOV�WR�D�-�((�(-%�LQIUDVWUXFWXUHf0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU

� )XWXUH�ZRUN

Page 2: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

2

3,QWHUDFWLYH�2EMHFWV�6RIWZDUH�*PE+,QWHUDFWLYH�2EMHFWV�6RIWZDUH�*PE+� ,QWHUDFWLYH�2EMHFWV�ZDV�IRXQGHG������ 6XFFHVVIXO�LQ�DSSOLHG�$UFKLWHFWXUDO�&RQVXOWLQJ

f ³&KLHI�$UFKLWHFW´�SRVLWLRQV�LQ�PDQ\�)RUWXQH�����FRPSDQLHV� $FWLYH�SDUWLFLSDQW�LQ�WKH�0RGHO�'ULYHQ�$UFKLWHFWXUH��0'$��VWDQGDUGL]DWLRQ�LQLWLDWLYH� /DXQFKHG�$UF6W\OHU 3URGXFW�/LQH�LQ�����

f%DVHG�RQ�D�GHFDGH�RI�UHDOLW\�VFDOH�FRQVXOWLQJf3URYHQ�52,�LQ�SURGXFWLRQ�HQYLURQPHQWVf'HILQHV�VXEVWDQWLDWHV�D�QHZ�FODVV��WKH�$UFKLWHFWXUDO�,'(f /HDGLQJ�0'$�WRRO

40RGHO�'ULYHQ�$UFKLWHFWXUH�RI�20*��7KH�,GHD0RGHO�'ULYHQ�$UFKLWHFWXUH�RI�20*��7KH�,GHD

:HE�6HUYHU8076�6HUYHU

6ZLQJ�$SS�&OLHQW

:HE�6HUYLFH50,�,,23,,23

• 'HSOR\DEOH�&RPSRQHQWV• %XLOG��WHVW�HQYLURQPHQW• ����

secureIBank<<EJBArchive>>

A B

• %XVLQHVV�2EMHFW�0RGHOV• %XVLQHVV�8VH�&DVHV• ���

A

B

%XVLQHVV�0RGHOLQJ

0RGHO7UDQVIRUPDWLRQ

Page 3: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

3

50RGHO�'ULYHQ�$UFKLWHFWXUH��ZZZ�RPJ�RUJ�PGD0RGHO�'ULYHQ�$UFKLWHFWXUH��ZZZ�RPJ�RUJ�PGD� 'HVLJQ�JRDOV��

f DGGUHVVHV�WKH�FRPSOHWH�OLIH�F\FOH�RI�GHVLJQLQJ��LPSOHPHQWLQJ��LQWHJUDWLQJ��WHVWLQJ��GHSOR\LQJ��DQG�PDQDJLQJ�DSSOLFDWLRQVf VHSDUDWHV�WKH�IXQGDPHQWDO�ORJLF�EHKLQG�D�VSHFLILFDWLRQ�IURP�WKH�VSHFLILFV�RI�WKH�SDUWLFXODU�PLGGOHZDUH�WKDW�LPSOHPHQWV�LW�f EXLOW�RQ�ZHOO�HVWDEOLVKHG�VWDQGDUGV�VXFK�DV�8QLILHG�0RGHOLQJ�/DQJXDJH��80/��DQG�;0/�0HWDGDWD�,QWHUFKDQJH��;0,��

� 0DLQ�EHQHILWV�f UHGXFHG�FRVW�DQG�FRPSOH[LW\�RI�DSSOLFDWLRQ�GHYHORSPHQWf LPSURYHG�DSSOLFDWLRQ�TXDOLW\�DQG�YDOLGDWLRQ�DW�PRGHO�OHYHOf UHXVH�RI�EXVLQHVV�PRGHOVf SODWWIRUP�LQGHSHQGHQFHf UDSLG�LQFOXVLRQ�RI�HPHUJLQJ�WHFKQRORJLHV

6

�-��:LOH\��1HZ�<RUN��������,6%1���������������

)RU�'HWDLOV�6HH����)RU�'HWDLOV�6HH����

Page 4: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

4

70RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\� 6HFXULW\�UHTXLUHPHQWV�DUH�H[SOLFLWO\�LQWURGXFHG�DW�WKH�80/�PRGHO�OHYHO�� *HQHUDWLRQ�RI�H[HFXWDEOH�VHFXUH�VRIWZDUH�V\VWHPV�IRU�GLIIHUHQW�,7�LQIUDVWUXFWXUHV�DFFRUGLQJ�WR�0'$�� %HQHILWV��LQ�DGGLWLRQ�WR�WKH�JHQHUDO�0'$�DGYDQWDJHV�

f&RQYHUJHQFH�EHWZHHQ�EXVLQHVV�PRGHO�DQG�VHFXULW\�PRGHOÆ OHVV�LQVHFXUH�VRIWZDUH�V\VWHPVf6HFXULW\�SROLFLHV�DUH�H[SUHVVHG�DW�D�KLJK�DEVWUDFWLRQ�OHYHO�Æ VHH�ZKDW�\RX�PHDQf ,GHQWLILFDWLRQ�RI�SRWHQWLDO�VHFXULW\�KROHV�DW�PRGHO�OHYHOf4XLFN�LQWHJUDWLRQ�RI�QHZ�VHFXULW\�UHTXLUHPHQWV�

80RGHO�'ULYHQ�6HFXULW\�² 2XU�$SSURDFK0RGHO�'ULYHQ�6HFXULW\�² 2XU�$SSURDFK� 6HFXULW\�0RGHO

f&XUUHQW�IRFXV�LV�RQ�DSSOLFDWLRQ�VHFXULW\f5ROH�EDVHG�DFFHVV�FRQWURO�LQ�FRPELQDWLRQ�ZLWK�DXWKRUL]DWLRQ�FRQVWUDLQWV�

� 80/�PRGHOLQJ�VW\OHf0RGHOLQJ�RI�VHFXULW\�UROHV��UHVRXUFHV��DFWLRQV�������Æ VHH�0HWDPRGHO�RQ�QH[W�VOLGH

f8VDEOH�DQG�VFDODEOH�QRWDWLRQ��DSSOLFDEOH�WR�UHDO�ZRUOG�PRGHOV�f+LJK�IOH[LELOLW\��ILQH�JUDLQHG�YV��FRDUVH�JUDLQHG�VW\OH�f'LIIHUHQW�YLHZV��UHVRXUFH�YV��VHFXULW\�UROH�FHQWHUHG�

Page 5: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

5

90HWDPRGHO�IRU�0RGHO�'ULYHQ�6HFXULW\0HWDPRGHO�IRU�0RGHO�'ULYHQ�6HFXULW\

GroupUser

0..*

+group

0..*

*URXS$VVLJQPHQW

MetamodelBinding

UMLType : stringStereotype : string

ResourceType

1..*+binding 1..*

0..1

0..*

+contexttype0..1 FRQWDLQPHQW

+contains

0..*

0..1

0..*

+supertype0..1

LQKHULWDQFH

+subtype

0..*

Subject

ActionType

1..*

1

+actiontype 1..*

+resourcetype 1

Role

1..* 0..*

+acts_as

1..*

+assigned

0..*

5ROH$VVLJQPHQW

ResourceSet

ModelElement(from UML)

0..*+contains

0..*

3HUPLVVLRQ

1..*+action 1..*

$FWLRQ7\SH$VVLJQPHQW

1

+subject

1 1

+protected_resource

1

AuthorizationConstraint

0..*+context 0..*0..*

+constraint

+constrainedPermission 0..*

1080/�0RGHOLQJ�6W\OH��$�6LPSOH�([DPSOH80/�0RGHOLQJ�6W\OH��$�6LPSOH�([DPSOH

perm1 : Read

<<Security.Permission>>

Account(from secure_ibank)

CustomerRole(from SecurityDomain)

<<Security.Role>> <<Security.Permission>>

6HFXULW\�UROH 5HVRXUFH$FWLRQ�V�

„A user acting in the security role „CustomerRole“ has read access to the resource account.“

Page 6: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

6

110RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU� $UF6W\OHU��ZZZ�$UF6W\OHU�FRP�

f /HDGLQJ�0'$�WRRO�DQG�FRPSOHWH�VXSSRUW�IRU�-�((�(-%�LQIUDVWUXFWXUHV

�0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHUf3URWRW\SLFDO�LQWHJUDWLRQ�LQWR�$UF6W\OHU�Y�����f3URGXFWL]DWLRQ�FXUUHQWO\�DW�ZRUN�f6HFXULQJ�(-%� DQG�:HE�DSSOLFDWLRQV�± UHVRXUFHV�WR�EH�SURWHFWHG�z (QWHUSULVH�-DYD%HDQV��(-%���FRPSRQHQW�PHWKRGV�z 6HUYOHWV�-63µV��KWWS�PHWKRGV�RQ�85/µV

� &RPSOHWH�PDSSLQJ�WR�-�((�(-%�VHFXULW\�DUFKLWHFWXUH

12-�((�(-%�6HFXULW\�$UFKLWHFWXUH-�((�(-%�6HFXULW\�$UFKLWHFWXUH� %DVHG�RQ�D�UROH�EDVHG�DFFHVV�FRQWURO PRGHO�� $ UROH�LV�GHILQHG�DV�ORJLFDO�SULYLOHJH WKDW�EXQGOHV�SHUPLVVLRQV�WR�DFFHVV�UHVRXUFHV�DFFRUGLQJ�WR�DQ�DFFHVV�SURILOH�W\SH�

� 5ROHV�DUH�DVVLJQHG�WR�VSHFLILF�XVHUV RU�JURXSV LQ�WKH�RSHUDWLRQDO�HQYLURQPHQW�

� -�((�XVHV�WZR�FRPSOHPHQWDU\�PHFKDQLVPV�IRU�DFFHVV�FRQWUROf 'HFODUDWLYH�DFFHVV�FRQWURO�Æ DFFHVV�FRQWURO�FDQ�EH�FRQILJXUHG�LQ�WKH�VR�FDOOHG�GHSOR\PHQW�GHVFULSWRU��VHH�QH[W�SDJH��

f 3URJUDPPDWLF�DFFHVV�FRQWURO�Æ XVHG�IRU�DUELWUDU\�DXWKRUL]DWLRQ�FRQVWUDLQWV�WKDW�FDQQRW�EH�H[SUHVVHG�ZLWK�GHFODUDWLYH�DFFHVV�FRQWURO�

Page 7: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

7

13([FHUSW�IURP�DQ�(-%�'HSOR\PHQW�'HVFULSWRU([FHUSW�IURP�DQ�(-%�'HSOR\PHQW�'HVFULSWRU����PHWKRG�SHUPLVVLRQ!�GHVFULSWLRQ�!�UROH�QDPH!(PSOR\HH5ROH��UROH�QDPH!�PHWKRG!�GHVFULSWLRQ�!�HME�QDPH!$FFRXQW��HME�QDPH!�PHWKRG�LQWI!+RPH��PHWKRG�LQWI!�PHWKRG�QDPH!FUHDWH��PHWKRG�QDPH!�PHWKRG�SDUDPV!�PHWKRG�SDUDP!MDYD�ODQJ�6WULQJ��PHWKRG�SDUDP!��PHWKRG�SDUDPV!��PHWKRG!�PHWKRG�SHUPLVVLRQ!���

14)XWXUH�:RUN)XWXUH�:RUN� )XUWKHU�80/�PRGHOLQJ�VW\OHV

f -�6(�VHFXULW\�DUFKLWHFWXUH�LQFOXGLQJ�-$$6f6XSSRUW�IRU�3.,�LQIUDVWUXFWXUHVf6XSSRUW�IRU�YHUWLFDO�GRPDLQV�VXFK�DV�,GHQWUXV�DQG�(�*RYHUQPHQW

� 7KRURXJK�YDOLGDWLRQ�RI�VHFXULW\�FRQVWUDLQWV�DW�PRGHO�OHYHO�� &RQVLGHUDWLRQ�RI�IXUWKHU�VHFXULW\�DVSHFWV��H�J��DXGLWLQJ���

Page 8: ModelDrivenSecurity DOCSec2002 - · PDF file2,qwhudfwlyh2emhfwv6 riwzduh* pe+,qwhudfwlyh2emhfwv6 riwzduh* pe+ 3 ‰,qwhudfwlyh2emhfwvz dvi rxqghg ˝˝ ‰ 6xffhvvixolqdssolhg$ufklwhfwxudo&

8

150RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\� 4XHVWLRQV"

<RX�DUH�ZHOFRPH�DW�RXU�GHPR�WDEOH�WR�VHH�D�GHPR�RQ�0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU�

160'$�7RRO�$UF6W\OHU�RI�,QWHUDFWLYH�2EMHFWV0'$�7RRO�$UF6W\OHU�RI�,QWHUDFWLYH�2EMHFWV

$UF6W\OHU (QWHUSULVH�(GLWLRQ

5DWLRQDO�5RVH -DYD�,'(

0'$�&DUWULGJHV

5DWLRQDO�8QLILHG�3URFHVV

%XVLQHVV2EMHFW0RGHOHU

3DWWHUQ5HILQHPHQW$VVLVWDQW

80/5HILQHPHQW$VVLVWDQW

%XLOG�'HSOR\��7HVW

6XSSRUW

6\VWHP�'HILQLWLRQ��$QDO\VLV��'HVLJQ�

6\VWHP�'HYHORSPHQW

9HULILFDWLRQ���7HVW���'HSOR\PHQW

%($�:HE/RJLF

,%0�:$6��17��]�26

$UFKLWHFW�(GLWLRQ�&XVWRP

,QIUDVWUXFWXUH

-�((�(-%���1(7

%RUODQG�%(6

,21$�L3$6

,'6�$5,6$UFKLWHFWXUDO6W\OH�%XLOGHU�0HWD�,'(

*HQHUDWRU(QJLQH

%XVLQHVV2EMHFW0RGHOHU

3DWWHUQ5HILQHPHQW$VVLVWDQW

80/5HILQHPHQW$VVLVWDQW

*HQHUDWRU(QJLQH

%XLOG�'HSOR\��7HVW

6XSSRUW

0'$�&DUWULGJHV

80/�;0/��;0,��5HSRVLWRU\

ZZZ�$UF6W\OHU�FRP