Access control is a mechanism for achieving confidentiality and integrity in software systems. Access control policies …. Traditionally, access control policies have been specified in an ad-hoc manner, leaving systems vulnerable to security breaches. ACP … requirements. This dissertation introduces the Requirements-based Access Control Analysis and Policy Specification (ReCAPS) method …