Tool Support for Enforcing Security Policies on Databases

Abstract

Abstract. Security in general and database protection from unauthorized access in particular, are crucial for organizations. It has long been accepted that security requirements should be considered from the early stages of the development. However, such requirements tend to be neglected or dealt-with only at the end of the development process. The Security Modeling Tool presented in this study aims at enforcing developers, in particular database designers, to deal with database authorization requirements from the early stages of development. This software demonstration shows how the Security Modeling Tool assists to define organizational security policies and use them during the application development to create a secured database schema.

Evaluation of the Pattern-based method for Secure Development (PbSD): A controlled experiment

“…In particular, we adopt the UML modeling language along with OCL. The methodology is supported by the Security Modeling Tool (SMT) [1].…”

“…The architects' office data model with access control specifications for the Architect Role. 1 The source materials necessary to replicate this experiment and/or apply it on other methods can be found at http://jkb.netii.net/index.php/artifacts. effectiveness of diagrams in system development.…”