Developing secure data warehouses with a UML extension

Information Systems

Volumn 32, Issue 6, 2007, Pages 826-856

  Fernández Medina, Eduardo ^a   Trujillo, Juan ^b   Villarroel, Rodolfo ^c   Piattini, Mario ^a  

^a UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^b UNIVERSITY OF ALICANTE   (Spain)

^c UNIVERSIDAD CATÓLICA DEL MAULE   (Chile)

Author keywords

Confidentiality; Data warehouses; Multidimensional conceptual modeling; Secure data warehouses; UML extension

Indexed keywords

CONFIDENTIALITY PROBLEMS; DATA WAREHOUSE (DW) DESIGN; MULTIDIMENSIONAL CONCEPTUAL MODELING; UML EXTENSION;

ADMINISTRATIVE DATA PROCESSING; COMPUTER PROGRAMMING LANGUAGES; INFORMATION MANAGEMENT; MATHEMATICAL MODELS; PROBLEM SOLVING; SECURITY OF DATA;

DATA WAREHOUSES;

EID: 34247643088     PISSN: 03064379     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.is.2006.07.003     Document Type: Article

References (59)

1. G. Dhillon, J. Backhouse, Information system security management in the new millennium, Commun. ACM 43 (7) (2000) 125-128.
2. P. Devanbu, S. Stubblebine, Software engineering for security: a roadmap, in: A. Finkelstein (Ed.), The Future of Software Engineering, ACM Press, New York, 2000, pp. 227-239.
3. E. Ferrari, B. Thuraisingham, Secure database systems, in: M. Piattini, O. Di?az (Eds.), Advanced Databases: Technology Design, Artech House, 2000.
4. A. Hall, R. Chapman, Correctness by construction: developing a commercial secure system, IEEE Software 19 (1) (2002) 18-25.
5. L. Chung, B. Nixon, E. Yu, J. Mylopoulos, Non-Functional Requirements in Software Engineering, Kluwer Academic Publishers, Boston/Dordrecht/London, 2000.
6. Directive 95/46/CE of the European Parliament and Council, dated October 24th, about People protection regarding the personal data management and the free circulation of these data. DOCE no. L281, 23/11/1995, P.0031-0050. 1995.
7. J. Trujillo, M. Palomar, J. Gómez, I.Y. Song, Designing data warehouses with OO conceptual models, IEEE Computer, special issue on Data Warehouses (34) (2001) 66-75.
8. S. Luján-Mora, J. Trujillo, I.Y. Song, Multidimensional modeling with UML package diagrams, In Proceedings of International Conference on Conceptual Modeling-ER 2002, Springer. LNCS 2503, Tampere, Finland, 2002.
9. S. Luján-Mora, J. Trujillo, I.Y. Song, Extending the UML for multidimensional modeling, In Proceedings of 5th International Conference on the Unified Modeling Language (UML 2002), Springer. LNCS 2460, Dresden, Germany, 2002. pp. 290-304.
10. E. Fernández-Medina, J. Trujillo, R. Villarroel, M. Piattini, Extending the UML for designing secure data warehouses, In Proceedings of International Conference on Conceptual Modeling (ER 2004), Springer, Shangai, China, 2004.
11. P. Samarati, S. De Capitani di Vimercati, Access control: policies, models, and mechanisms, in: R. Focardi, R. Gorrieri (Eds.), Foundations of Security Analysis and Design, Springer, Berlin, 2000, pp. 137-196.
12. R. Sandhu, E. Coyne, H. Feinstein, C. Youman, Role-based access control models, IEEE Computer 29 (2) (1996) 38-47.
13. R. Sandhu, D. Ferraiolo, R. Kuhn, The NIST model for role-based access control: towards a unified standard, Proceedings of fifth ACM Workshop on Role-Based Access Control, Berlin, Germany, 2000, pp. 47-63.
14. J. Levinger, Oracle label security. Administrator's guide 10 g. Release 1 (10.1) http://www.csis.gvsu.edu/GeneralInfo/Oracle/network.920/a96578.pdf, 2003.
15. S. Cota, For certain eyes only, DB2 Mag. 9 (1) (2004) 40-45.
16. R. Kimball, M. Ross, The Data Warehousing Toolkit, Second ed, Wiley, New York, 2002.
17. M. Blaschka, C. Sapia, G. Höfling, B. Dinter, Finding your way through Multidimensional Data Models, Proceedings of 9th Intl. Conference on Database and Expert Systems Applications (DEXA'98), Springer-Verlag, LNCS, 1460, Vienna, Austria, 1998. pp. 198-203.
18. A. Abelló, J. Samos, F. Saltor, A Framework for the Classification and Description of Multidimensional Data Models, In Proceedings of 12th International Conference on Database and Expert Systems Applications (DEXA'01), Springer-Verlag LNCS 2113, Munich, Germany, 2001, pp. 668-677.
19. C. Sapia, On modeling and predicting query behavior in OLAP systems, In Proceedings of International Workshop on Design and Management of Data Warehouses (DMDW'99), Heidelberg, Germany, 1999. pp. 1-10.
20. C. Sapia, M. Blaschka, G. Höfling, B. Dinter, Extending the E/R Model for the Multidimensional Paradigm, In Proceedings of 1st International Workshop on Data Warehouse and Data Mining (DWDM'98), Springer, 1552, Singapore, 1998, pp. 105-116.
21. N. Tryfona, F. Busborg, J. Christiansen, starER: a conceptual model for data warehouse design, In Proceedings of ACM 2nd International Workshop on Data Warehousing and OLAP (DOLAP'99), ACM, Missouri, USA, 1999. pp. 3-8.
22. M. Golfarelli, D. Maio, S. Rizzi, The dimensional fact model: a conceptual model for data warehouses, Int. J. Cooper. Inform. Syst. 7 (2-3) (1998) 215-247.
23. M. Golfarelli, S. Rizzi, A methodological framework for data warehouse design, In Proceedings of 1st International Workshop on Data Warehousing and OLAP (DOLAP'98), Maryland, USA, 1998, pp. 3-9.
24. B. Husemann, J. Lechtenborger, G. Vossen, Conceptual Data Warehouse Design, (Ed.), In Proceedings of the 2nd. International Workshop on Design and Management of Data Warehouses, Technical University of Aachen (RWTH), 2000. pp. 3-9.
25. A. Abelló, J. Samos, F. Saltor, YAM2 (Yet another multidimensional model): an extension of UML, (Ed.), International Database Engineering & Applications Symposium (IDEAS 2002), IEEE Computer Society, 2002, pp. 172-181.
26. N. Binh, A. Tjoa, Conceptual multidimensional data model based on object-oriented metacube, Proceedings of ACM Simposium on Applied Computing, Las Vegas, Nevada, USA, 2001, pp. 295-300.
27. N. Binh, A. Tjoa, R. Wagner, An object oriented multidimensional data model for OLAP, In Proceedings of First International Conference on Web-Age Information Management, Springer, Shanghai, China, 2000.
28. T. Priebe, G. Pernul, Metadaten-gestützer data-warehouseentwurf mit ADAMTed UML, In Proceedings of 5th Internationale Tagung Wirtschaftsinformatik, Physica, Augsburg, 2001.
29. OMG, Object management group. UML 2.0. OCL specification, OMG document ptc/03-10-14. 2004.
30. G.W. Smith, Modeling security-relevant data semantics, IEEE Trans Software Eng. 17 (11) (1991) 1195-1203.
31. G. Pernul, W. Winiwarter, A. Tjoa, The entity-relationship model for multilevel security, In Proceedings of 12th International Conference on the Entity-Relationship Approach (ER 1993), Arlington, TX, USA, 1993. pp. 166-177.
32. D. Marks, P. Sell, B. Thuraisingham, MOMT: a multi-level object modeling technique for designing secure database applications, J. Object-Oriented Program. 9 (4) (1996) 22-29.
33. J. Jü rjens, Towards development of secure systems using UML, In Proceedings of International Conference on the Fundamental Approaches to Software Engineering (FASEi- TAPS), Springer, 2001.
34. J. Jü rjens, UMLsec: extending UML for secure systems development, in: J. Jézéquel, H. Hussmann, S. Cook (Eds.), UML 2002-The UnifiedModeling Language, Model Engineering, Concepts and Tools, Springer, Berlin, 2002, pp. 412-425.
35. T. Lodderstedt, D. Basin, J. Doser, SecureUML: A UMLbased modeling language for model-driven security, In Proceedings of The Unified Modeling Language Conference, Springer. LNCS 2460, Dresden, Germany, 2002. pp. 426-441.
36. E. Fernández-Medina, M. Piattini, Designing secure database for OLS, In Proceedings of Database and Expert Systems Applications: 14th International Conference (DEXA 2003), Springer. LNCS 2736, 2736, Prague, Czech Republic, 2003. pp. 886-895.
37. E. Fernández-Medina, M. Piattini, Extending OCL for secure database design, In Proceedings of International Conference on the Unified Modeling Language (UML 2004), Springer, LNCS 3273, Lisbon, Portugal, 2004, pp. 380-394.
38. J. Warmer, A. Kleppe, The Object Constraint Language, Second Ed., Getting Your Models Ready for MDA, Addison Wesley, 2003.
39. T. Priebe, G. Pernul, Towards OLAP security design- survey and research issues, In Proceedings of 3rd ACM International Workshop on Data Warehousing and OLAP (DOLAP'00), Washington DC, USA, 2000, pp. 33-40.
40. T. Priebe, G. Pernul, A pragmatic approach to conceptual modeling of OLAP security, In Proceedings of 20th Int. Conference on Conceptual Modeling, Springer, LNCS 2224, Yokohama, Japan, 2001, pp. 311-324.
41. N. Katic, G. Quirchmayr, J. Schiefer, M. Stolba, A. Min Tjoa, A prototype model for data warehouse security based on metadata, In Proceedings of 9th International Workshop on Database and Expert Systems Applications (DEXA'98). IEEE Computer Society, 8, Vienna, Austria, 1998. pp. 300-308.
42. A. Rosenthal, E. Sciore, View security as the basic for data warehouse security, In Proceedings of 2nd International Workshop on Design and Management of Data Warehouse, 28, Sweden, 2000, pp. 8.1-8.8.
43. R. Kirkgöze, N. Katic, M. Stolda, A. Min Tjoa, A security concept for OLAP, In Proceedings of 8th International Workshop on Database and Expert System Applications (DEXA'97), IEEE Computer Society, Toulouse, France, 1997, pp. 619-626.
44. L. Wang, S. Jajodia, D. Wijesekera, Securing OLAP data cubes against privacy breaches, In Proceedings of IEEE Symposium on Security and Privacy, Berkeley, California, 2004. pp. 161-178.
45. E. Weippl, O. Mangisengi, W. Essmayr, F. Lichtenberger, W. Winiwarter, An authorization model for data warehouses and OLAP, In Proceedings of Workshop on Security in Distributed Data Warehousing, New Orleans, Louisiana, USA, 2001.
46. M. Gogolla, B. Henderson-Sellers, Analysis of UML Stereotypes within the UML Metamodel, In Proceedings of 5th International Conference on the Unified Modeling Language-The Language and its Applications, Springer, LNCS 2460, Dresden, Germany, 2002. pp. 84-99.
47. E.B. Fernandez, R.Y. Pan, A pattern language for security models, In Proceedings of 8th Conference on Patterns Languages of Programs (PLOP 2001), Illinois, USA, 2001.
48. J. Conallen, Building Web Applications with UML, Object Technology Series., Addison-Wesley, Reading, MA, 2000.
49. OMG, Object Management group: unified modeling language specification 1.5. 2004.
50. A. Baraani-Dastjerdi, J. Pieprzyk, R. Safavi-Naini, Security in Databases: A Survey Study. Department of Computer Science, The University of Wollongong, 1996.
51. A. Baraani-Dastjerdi, R. Safavi-Naini, J. Pieprzyk, J. Getta, A Model of Authorization for Object-Oriented Databases Based on Object Views, In Proceedings of International Conference on Deductive and Object-Oriented Databases, Springer, LNCS 1013, Singapore, 1995. pp. 503-520.
52. E. Gü n, K. Wang, An access control language for web services, In Proceedings of Seventh ACM Symposium on Access Control Models and Technologies, ACM Press, Monterey, California, USA, 2002, pp. 23-30.
53. R. Sandhu, F. Chen, The multilevel relational data model, ACM Trans. Inform. Syst. Security (TISSEC) 1 (1) (1998) 93-132.
54. A. Nanda, Keeping Information Private with VPD, Oracle XVIII (2) (2004) 81-84.
55. A. Nanda, D. Burleson, Oracle privacy security auditing, RAMPANT, 2003.
56. A. Kleppe, J. Warmer, W. Bast, MDA Explained; The Model Driven Architecture: Practice and Promise, Addison- Wesley, Reading, MA, 2003.
57. P. Atzeni, S. Ceri, S. Paraboschi, R. Torlone, Database Systems. Concepts Language and Architectures, McGraw- Hill, New York, 1999.
58. M. Blaha, W. Premerlani, Object-Oriented Modeling and Design for Database Applications, Prentice-Hall, Englewood Cliffs, NJ, 1998.
59. R. Muller, Database Design for Smarties. Using UML for Data Modeling, Morgan Kaufmann Publisher, inc, San Francisco, California, 1999.