modeldrivensecurity docsec2002 - · pdf file2,qwhudfwlyh2emhfwv6 riwzduh*...
TRANSCRIPT
1
7+(�,7�$5&+,7(&785(�352)(66,21$/6
0RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\'U��0DUWLQ�%XFKKHLW
'U��%HUQKDUG�+ROOXQGHU7RUVWHQ�/RGGHUVWHGW
��,QWHUDFWLYH�2EMHFWV�6RIWZDUH�± LQIR#LR�VRIWZDUH�FRP
22YHUYLHZ2YHUYLHZ� &RPSDQ\�2YHUYLHZ�0RGHO�'ULYHQ�$UFKLWHFWXUH��0'$�
f*RDOV�DQG�EHQHILWV�0RGHO�'ULYHQ�6HFXULW\
f80/�PRGHOLQJ�VW\OH�IRU�UROH�EDVHG�DFFHVV�FRQWUROf0DSSLQJ�80/�PRGHOV�WR�D�-�((�(-%�LQIUDVWUXFWXUHf0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU
� )XWXUH�ZRUN
2
3,QWHUDFWLYH�2EMHFWV�6RIWZDUH�*PE+,QWHUDFWLYH�2EMHFWV�6RIWZDUH�*PE+� ,QWHUDFWLYH�2EMHFWV�ZDV�IRXQGHG������ 6XFFHVVIXO�LQ�DSSOLHG�$UFKLWHFWXUDO�&RQVXOWLQJ
f ³&KLHI�$UFKLWHFW´�SRVLWLRQV�LQ�PDQ\�)RUWXQH�����FRPSDQLHV� $FWLYH�SDUWLFLSDQW�LQ�WKH�0RGHO�'ULYHQ�$UFKLWHFWXUH��0'$��VWDQGDUGL]DWLRQ�LQLWLDWLYH� /DXQFKHG�$UF6W\OHU 3URGXFW�/LQH�LQ�����
f%DVHG�RQ�D�GHFDGH�RI�UHDOLW\�VFDOH�FRQVXOWLQJf3URYHQ�52,�LQ�SURGXFWLRQ�HQYLURQPHQWVf'HILQHV�VXEVWDQWLDWHV�D�QHZ�FODVV��WKH�$UFKLWHFWXUDO�,'(f /HDGLQJ�0'$�WRRO
40RGHO�'ULYHQ�$UFKLWHFWXUH�RI�20*��7KH�,GHD0RGHO�'ULYHQ�$UFKLWHFWXUH�RI�20*��7KH�,GHD
:HE�6HUYHU8076�6HUYHU
6ZLQJ�$SS�&OLHQW
:HE�6HUYLFH50,�,,23,,23
• 'HSOR\DEOH�&RPSRQHQWV• %XLOG��WHVW�HQYLURQPHQW• ����
secureIBank<<EJBArchive>>
A B
• %XVLQHVV�2EMHFW�0RGHOV• %XVLQHVV�8VH�&DVHV• ���
A
B
%XVLQHVV�0RGHOLQJ
0RGHO7UDQVIRUPDWLRQ
3
50RGHO�'ULYHQ�$UFKLWHFWXUH��ZZZ�RPJ�RUJ�PGD0RGHO�'ULYHQ�$UFKLWHFWXUH��ZZZ�RPJ�RUJ�PGD� 'HVLJQ�JRDOV��
f DGGUHVVHV�WKH�FRPSOHWH�OLIH�F\FOH�RI�GHVLJQLQJ��LPSOHPHQWLQJ��LQWHJUDWLQJ��WHVWLQJ��GHSOR\LQJ��DQG�PDQDJLQJ�DSSOLFDWLRQVf VHSDUDWHV�WKH�IXQGDPHQWDO�ORJLF�EHKLQG�D�VSHFLILFDWLRQ�IURP�WKH�VSHFLILFV�RI�WKH�SDUWLFXODU�PLGGOHZDUH�WKDW�LPSOHPHQWV�LW�f EXLOW�RQ�ZHOO�HVWDEOLVKHG�VWDQGDUGV�VXFK�DV�8QLILHG�0RGHOLQJ�/DQJXDJH��80/��DQG�;0/�0HWDGDWD�,QWHUFKDQJH��;0,��
� 0DLQ�EHQHILWV�f UHGXFHG�FRVW�DQG�FRPSOH[LW\�RI�DSSOLFDWLRQ�GHYHORSPHQWf LPSURYHG�DSSOLFDWLRQ�TXDOLW\�DQG�YDOLGDWLRQ�DW�PRGHO�OHYHOf UHXVH�RI�EXVLQHVV�PRGHOVf SODWWIRUP�LQGHSHQGHQFHf UDSLG�LQFOXVLRQ�RI�HPHUJLQJ�WHFKQRORJLHV
6
�-��:LOH\��1HZ�<RUN��������,6%1���������������
)RU�'HWDLOV�6HH����)RU�'HWDLOV�6HH����
4
70RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\� 6HFXULW\�UHTXLUHPHQWV�DUH�H[SOLFLWO\�LQWURGXFHG�DW�WKH�80/�PRGHO�OHYHO�� *HQHUDWLRQ�RI�H[HFXWDEOH�VHFXUH�VRIWZDUH�V\VWHPV�IRU�GLIIHUHQW�,7�LQIUDVWUXFWXUHV�DFFRUGLQJ�WR�0'$�� %HQHILWV��LQ�DGGLWLRQ�WR�WKH�JHQHUDO�0'$�DGYDQWDJHV�
f&RQYHUJHQFH�EHWZHHQ�EXVLQHVV�PRGHO�DQG�VHFXULW\�PRGHOÆ OHVV�LQVHFXUH�VRIWZDUH�V\VWHPVf6HFXULW\�SROLFLHV�DUH�H[SUHVVHG�DW�D�KLJK�DEVWUDFWLRQ�OHYHO�Æ VHH�ZKDW�\RX�PHDQf ,GHQWLILFDWLRQ�RI�SRWHQWLDO�VHFXULW\�KROHV�DW�PRGHO�OHYHOf4XLFN�LQWHJUDWLRQ�RI�QHZ�VHFXULW\�UHTXLUHPHQWV�
80RGHO�'ULYHQ�6HFXULW\�² 2XU�$SSURDFK0RGHO�'ULYHQ�6HFXULW\�² 2XU�$SSURDFK� 6HFXULW\�0RGHO
f&XUUHQW�IRFXV�LV�RQ�DSSOLFDWLRQ�VHFXULW\f5ROH�EDVHG�DFFHVV�FRQWURO�LQ�FRPELQDWLRQ�ZLWK�DXWKRUL]DWLRQ�FRQVWUDLQWV�
� 80/�PRGHOLQJ�VW\OHf0RGHOLQJ�RI�VHFXULW\�UROHV��UHVRXUFHV��DFWLRQV�������Æ VHH�0HWDPRGHO�RQ�QH[W�VOLGH
f8VDEOH�DQG�VFDODEOH�QRWDWLRQ��DSSOLFDEOH�WR�UHDO�ZRUOG�PRGHOV�f+LJK�IOH[LELOLW\��ILQH�JUDLQHG�YV��FRDUVH�JUDLQHG�VW\OH�f'LIIHUHQW�YLHZV��UHVRXUFH�YV��VHFXULW\�UROH�FHQWHUHG�
5
90HWDPRGHO�IRU�0RGHO�'ULYHQ�6HFXULW\0HWDPRGHO�IRU�0RGHO�'ULYHQ�6HFXULW\
GroupUser
0..*
+group
0..*
*URXS$VVLJQPHQW
MetamodelBinding
UMLType : stringStereotype : string
ResourceType
1..*+binding 1..*
0..1
0..*
+contexttype0..1 FRQWDLQPHQW
+contains
0..*
0..1
0..*
+supertype0..1
LQKHULWDQFH
+subtype
0..*
Subject
ActionType
1..*
1
+actiontype 1..*
+resourcetype 1
Role
1..* 0..*
+acts_as
1..*
+assigned
0..*
5ROH$VVLJQPHQW
ResourceSet
ModelElement(from UML)
0..*+contains
0..*
3HUPLVVLRQ
1..*+action 1..*
$FWLRQ7\SH$VVLJQPHQW
1
+subject
1 1
+protected_resource
1
AuthorizationConstraint
0..*+context 0..*0..*
+constraint
+constrainedPermission 0..*
1080/�0RGHOLQJ�6W\OH��$�6LPSOH�([DPSOH80/�0RGHOLQJ�6W\OH��$�6LPSOH�([DPSOH
perm1 : Read
<<Security.Permission>>
Account(from secure_ibank)
CustomerRole(from SecurityDomain)
<<Security.Role>> <<Security.Permission>>
6HFXULW\�UROH 5HVRXUFH$FWLRQ�V�
„A user acting in the security role „CustomerRole“ has read access to the resource account.“
6
110RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU� $UF6W\OHU��ZZZ�$UF6W\OHU�FRP�
f /HDGLQJ�0'$�WRRO�DQG�FRPSOHWH�VXSSRUW�IRU�-�((�(-%�LQIUDVWUXFWXUHV
�0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHUf3URWRW\SLFDO�LQWHJUDWLRQ�LQWR�$UF6W\OHU�Y�����f3URGXFWL]DWLRQ�FXUUHQWO\�DW�ZRUN�f6HFXULQJ�(-%� DQG�:HE�DSSOLFDWLRQV�± UHVRXUFHV�WR�EH�SURWHFWHG�z (QWHUSULVH�-DYD%HDQV��(-%���FRPSRQHQW�PHWKRGV�z 6HUYOHWV�-63µV��KWWS�PHWKRGV�RQ�85/µV
� &RPSOHWH�PDSSLQJ�WR�-�((�(-%�VHFXULW\�DUFKLWHFWXUH
12-�((�(-%�6HFXULW\�$UFKLWHFWXUH-�((�(-%�6HFXULW\�$UFKLWHFWXUH� %DVHG�RQ�D�UROH�EDVHG�DFFHVV�FRQWURO PRGHO�� $ UROH�LV�GHILQHG�DV�ORJLFDO�SULYLOHJH WKDW�EXQGOHV�SHUPLVVLRQV�WR�DFFHVV�UHVRXUFHV�DFFRUGLQJ�WR�DQ�DFFHVV�SURILOH�W\SH�
� 5ROHV�DUH�DVVLJQHG�WR�VSHFLILF�XVHUV RU�JURXSV LQ�WKH�RSHUDWLRQDO�HQYLURQPHQW�
� -�((�XVHV�WZR�FRPSOHPHQWDU\�PHFKDQLVPV�IRU�DFFHVV�FRQWUROf 'HFODUDWLYH�DFFHVV�FRQWURO�Æ DFFHVV�FRQWURO�FDQ�EH�FRQILJXUHG�LQ�WKH�VR�FDOOHG�GHSOR\PHQW�GHVFULSWRU��VHH�QH[W�SDJH��
f 3URJUDPPDWLF�DFFHVV�FRQWURO�Æ XVHG�IRU�DUELWUDU\�DXWKRUL]DWLRQ�FRQVWUDLQWV�WKDW�FDQQRW�EH�H[SUHVVHG�ZLWK�GHFODUDWLYH�DFFHVV�FRQWURO�
7
13([FHUSW�IURP�DQ�(-%�'HSOR\PHQW�'HVFULSWRU([FHUSW�IURP�DQ�(-%�'HSOR\PHQW�'HVFULSWRU����PHWKRG�SHUPLVVLRQ!�GHVFULSWLRQ�!�UROH�QDPH!(PSOR\HH5ROH��UROH�QDPH!�PHWKRG!�GHVFULSWLRQ�!�HME�QDPH!$FFRXQW��HME�QDPH!�PHWKRG�LQWI!+RPH��PHWKRG�LQWI!�PHWKRG�QDPH!FUHDWH��PHWKRG�QDPH!�PHWKRG�SDUDPV!�PHWKRG�SDUDP!MDYD�ODQJ�6WULQJ��PHWKRG�SDUDP!��PHWKRG�SDUDPV!��PHWKRG!�PHWKRG�SHUPLVVLRQ!���
14)XWXUH�:RUN)XWXUH�:RUN� )XUWKHU�80/�PRGHOLQJ�VW\OHV
f -�6(�VHFXULW\�DUFKLWHFWXUH�LQFOXGLQJ�-$$6f6XSSRUW�IRU�3.,�LQIUDVWUXFWXUHVf6XSSRUW�IRU�YHUWLFDO�GRPDLQV�VXFK�DV�,GHQWUXV�DQG�(�*RYHUQPHQW
� 7KRURXJK�YDOLGDWLRQ�RI�VHFXULW\�FRQVWUDLQWV�DW�PRGHO�OHYHO�� &RQVLGHUDWLRQ�RI�IXUWKHU�VHFXULW\�DVSHFWV��H�J��DXGLWLQJ���
8
150RGHO�'ULYHQ�6HFXULW\0RGHO�'ULYHQ�6HFXULW\� 4XHVWLRQV"
<RX�DUH�ZHOFRPH�DW�RXU�GHPR�WDEOH�WR�VHH�D�GHPR�RQ�0RGHO�'ULYHQ�6HFXULW\�ZLWK�$UF6W\OHU�
160'$�7RRO�$UF6W\OHU�RI�,QWHUDFWLYH�2EMHFWV0'$�7RRO�$UF6W\OHU�RI�,QWHUDFWLYH�2EMHFWV
$UF6W\OHU (QWHUSULVH�(GLWLRQ
5DWLRQDO�5RVH -DYD�,'(
0'$�&DUWULGJHV
5DWLRQDO�8QLILHG�3URFHVV
%XVLQHVV2EMHFW0RGHOHU
3DWWHUQ5HILQHPHQW$VVLVWDQW
80/5HILQHPHQW$VVLVWDQW
%XLOG�'HSOR\��7HVW
6XSSRUW
6\VWHP�'HILQLWLRQ��$QDO\VLV��'HVLJQ�
6\VWHP�'HYHORSPHQW
9HULILFDWLRQ���7HVW���'HSOR\PHQW
%($�:HE/RJLF
,%0�:$6��17��]�26
$UFKLWHFW�(GLWLRQ�&XVWRP
,QIUDVWUXFWXUH
-�((�(-%���1(7
%RUODQG�%(6
,21$�L3$6
,'6�$5,6$UFKLWHFWXUDO6W\OH�%XLOGHU�0HWD�,'(
*HQHUDWRU(QJLQH
%XVLQHVV2EMHFW0RGHOHU
3DWWHUQ5HILQHPHQW$VVLVWDQW
80/5HILQHPHQW$VVLVWDQW
*HQHUDWRU(QJLQH
%XLOG�'HSOR\��7HVW
6XSSRUW
0'$�&DUWULGJHV
80/�;0/��;0,��5HSRVLWRU\
ZZZ�$UF6W\OHU�FRP