系统RBAC安全模型与其UML模型的集成

Integration of systematic RBAC security model and UML model

软件系统建模一般不包括安全建模,系统安全策略和安全机制往往作为开发人员在系统开发后期对系统的补充和完善的措施。这种不规范的安全需求处理方法为系统后期安全维护及系统之间的集成带来莫大隐患。阐述了系统RBAC的安全模型与系统通常UML设计模型的集成。最后结合一个实例,具体说明集成的方法与过程。

The modeling of software system generally does not include security model. System security strategy and mechanism are often taken as the supplement and improvement to system in the later period of its development. This kind of nonstandard processing of security requirements brings great hidden danger for the system in later security maintenance and system integration. The integration of RBAC security model and generally UML design model is introduced. Finally, the method and the process of the integration with an example are explained specifically.