Adapting the UCON_ABC Usage Control Policies on CORBASec Infrastructure

The JaCoWeb-ABC infrastructure is an extension of the CORBASec specification that applies the UCON_ABC access control model to its security layer. JaCoWeb-ABC defines configurable access controls that deploy authorization, obligation and condition policies. These security policies can be defined in two different manners. The first one is totally transparent to applications, for cases where JaCoWeb-ABC has all the necessary information for the access decision process, and the second one works together with applications, in cases where security controls depend on external information that must be supplied by the application. Combining these two functionalities allows for a much more accurate and strict control over the actions of users within a system, making it possible to block access in case inappropriate behavior is identified.