Verification of SGAC Access Control Policies Using Alloy and ProB

Abstract : This paper investigates the verification ofaccess control policies for SGAC, a new healthcare access-control model, using Alloy and ProB, two first orderlogic model checkers based on distinct technologies.SGAC supports permission and prohibition, ruleinheritance among subjects and resources and conflictsresolution. In order to protect patient privacy while ensuringeffective caregiving in safety-critical situations, we check different properties such as accessibility, ineffectiverule detection. Our performance results showthat ProB performs two orders of magnitude betterthan Alloy. Results are promising enough to considerProB for verifying patient policies in SGAC.
Document type :
Conference papers
Liste complète des métadonnées
Contributor : Régine Laleau <>
Submitted on : Wednesday, August 16, 2017 - 7:31:30 PM
Last modification on : Tuesday, January 22, 2019 - 2:32:05 PM



Nghi Huynh, Marc Frappier, Amel Mammar, Régine Laleau. Verification of SGAC Access Control Policies Using Alloy and ProB. 18th IEEE International Symposium on High Assurance Systems Engineering, HASE 2017, Jan 2017, Singapore, Singapore. pp.120 - 123, ⟨10.1109/HASE.2017.24⟩. ⟨hal-01574899⟩



Record views