Research and Application of XACML-Based Fine-Grained Security Policy for Distributed System

In distributed system development security is a major design criteria. However, the present software system modeling does not deal with security. System security policies and mechanisms often become the supplement at the end of system development. In this paper, a software development process is considered two common stages which are functional requirement analysis stage and system design stage. We extend the UML notation to model the security requirements which is generated from the function modeling process. The access control UML models are finally used to generate access control policies which can be described by XACML and deployed into the enforcement infrastructure. Finally, the decisions for users' requests will be made through Sun's XACML Implementation.