Welcome to the InfoSci Platform
Reference Hub1
Analysis of ANSI RBAC Support in EJB

Analysis of ANSI RBAC Support in EJB

Wesam Darwish, Konstantin Beznosov
Copyright: © 2011 |Volume: 2 |Issue: 2 |Pages: 28
ISSN: 1947-3036|EISSN: 1947-3044|EISBN13: 9781613508961|DOI: 10.4018/jsse.2011040102
Cite Article Cite Article

MLA

Darwish, Wesam, and Konstantin Beznosov. "Analysis of ANSI RBAC Support in EJB." IJSSE vol.2, no.2 2011: pp.25-52. http://doi.org/10.4018/jsse.2011040102

APA

Darwish, W. & Beznosov, K. (2011). Analysis of ANSI RBAC Support in EJB. International Journal of Secure Software Engineering (IJSSE), 2(2), 25-52. http://doi.org/10.4018/jsse.2011040102

Chicago

Darwish, Wesam, and Konstantin Beznosov. "Analysis of ANSI RBAC Support in EJB," International Journal of Secure Software Engineering (IJSSE) 2, no.2: 25-52. http://doi.org/10.4018/jsse.2011040102

Export Reference

Mendeley
Favorite Full-Issue Download

Abstract

This paper analyzes access control mechanisms of the Enterprise Java Beans (EJB) architecture and defines a configuration of the EJB protection system in a more precise and less ambiguous language than the EJB 3.0 standard. Using this configuration, the authors suggest an algorithm that formally specifies the semantics of authorization decisions in EJB. The level of support is analyzed for the American National Standard Institute’s (ANSI) specification of Role-Based Access Control (RBAC) components and functional specification in EJB. The results indicate that the EJB specification falls short of supporting even Core ANSI RBAC. EJB extensions dependent on the operational environment are required in order to support ANSI RBAC required components. Other vendor-specific extensions are necessary to support ANSI RBAC optional components. Fundamental limitations exist, however, due to the impracticality of some aspects of the ANSI RBAC standard itself. This paper sets up a framework for assessing implementations of ANSI RBAC for EJB systems.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.