static verification of security requirements in role based cscw systems
In this paper, we present static verification of security requirements for CSCW systems using finite-state techniques, i.e., model checking. The coordination and security constraints of CSCW systems are specified using a role based collaboration model. The verification ensures completeness and consistency of the specification given global requirements. We have developed several verification models to check security properties, such as task-flow constraints, information flow or confidentiality, and assignment of administrative privileges. The primary contribution of this paper is a methodology for verification of security requirements during designing collaboration systems.
verification secure requirements role systems paper model checking model coordination constraint collaboration consistency global flow information flow confidentiality assignment methodology collaboration system task role based access control finite-state based model checking security policy specification