Access Road 
in networks, systems and applications
Home | News
| FAQ | Documentation
| Download | Links
| Authors
Analyze
the access rights in powerful diagrams
It is hard to make a good security design. The more weak the design is, the more costly and unreliable the security administration will be, even with free tools. Access Road will help to model and to learn about the access rights in complex information systems, by the mean of user-friendly and powerful diagrams. It is a software in Java with a GPL license.
The first topics to be covered will be the existing resources (files, applications, servers...), the user profiles, the access functions and the rights in the software. Later, the access needs, the security requirements, the risks will perhaps be modeled if some guys come with me to make it.
Here is a screenshot of the main window:
|
|
 |
Human being appears to be the main issue in IT security, as in
most cases. This is not really tool, even nor process. After
the will to succeed, an underlying need are often to build up
a bridge between the advocates of order, the money managers and
the technology addicts. Other needs are time for studying the
area, knowledge and communication in IT security. Security tools
are just an help in these varied human issues. They can help
to reduce analysis time, to increase knowledge in security, and
also to improve internal communication in IT projects. See an
editor's note on the very medium level
of IT security.
Access Road aims at becoming an help for the design, the mapping and the learning of access control in networks, operating systems, middleware and applications. It may also be an help in the learning about Java desktop application, graphical representation and object-oriented software.
The current 0.5.0 version provides a set of very basic functions for the user, without data update. It allows to model and display some predefined operating systems and simple softwares, to model and display graphical views about the access rights between any elements, and to justify these rights. But for the developer, with about 8000 lines of effective code, I hope the current version is already a very workable framework for the future versions.
The first modeled access control systems (ACS) will be soon Linux, Solaris with access control lists, Apache, any application-specific ACS, any simple ACS like a network router.
- you think that access control is too complex to be modeled by diagrams? You think that diagrams are useless if you know the issue, and obscure if you are not trained? See Examples of design with diagrams
- Access Road project.
- state of the project.
Acknowledgements
This website is hosted by SourceForge of VA Linux, which offers free of charges services for open source software projects.
Last modification of this page : November 13, 2001
© Copyright 2000-2001 TPA Conseil - All Rights Reserved.