Development of secure automated management systems based on web technologies

摘要

This paper discusses security problems of developing municipal management information systems for Department of Municipal Procurement of the Krasnoyarsk City Administration (Russia). Authors describe the problem, goals, and tasks to be solved. Some security aspects are given, as well as original extended role-based security access control model for web applications and web services. This work describes two information systems developed bv soecialists of the Institute of Computational Modelling of the Siberian Branch of the Russian Academy of Sciences using described approaches. The systems have been in production for several years. The methods used to protect information are given, the structure of software is presented.