Role-Based Access Control (RBAC) has been widely used for expressing access control policies. Administrative Role-Based Access Control (ARBAC) specifies how an RBAC policy may be changed by each administrator. Because sequences of changes by different administrators may interact in unintended ways, it is often difficult to fully understand the effect of an ARBAC policy by simple inspection. This paper presents RBAC-PAT, a tool for analyzing RBAC and ARBAC policies, which supports analysis of various properties including reachability, availability, containment, weakest precondition, dead roles, and information flows.

References in zbMATH (referenced in 3 articles )

Showing results 1 to 3 of 3.
Sorted by year (citations)

  1. Stambouli, Abdelouadoud; Logrippo, Luigi: Data flow analysis from capability lists, with application to RBAC (2019)
  2. Ranise, Silvio: Symbolic backward reachability with effectively propositional logic. Application to security policy analysis (2013)
  3. Gofman, Mikhail I.; Luo, Ruiqi; Solomon, Ayla C.; Zhang, Yingbin; Yang, Ping; Stoller, Scott D.: RBAC-PAT: a policy analysis tool for role based access control (2009) ioport