Model-driven multidimensional modeling of secure data warehouses

European Journal of Information Systems

Volumn 16, Issue 4, 2007, Pages 374-389

  Fernández Medina, Eduardo ^a   Trujillo, Juan ^b   Piattini, Mario ^a  

^a UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^b UNIVERSITY OF ALICANTE   (Spain)

Author keywords

Access control; Audit; Data warehouses; MDA; MDDW; MDS; Secure multidimensional modeling; UML

Indexed keywords

EID: 35548980380     PISSN: 0960085X     EISSN: 14769344     Source Type: Journal    
DOI: 10.1057/palgrave.ejis.3000687     Document Type: Article

References (66)

1. ABELLÓ A, SAMOS J and SALTOR F (2001) A framework for the classification and description of multidimensional data models. 72th International Conference on Database and Expert Systems Applications (DEXA'01) Lecture Notes in Computer Science, Vol. 2113, pp 668-677 Springer, Berlin.
2. ABELLÓ A, SAMOS J and SALTOR F (2002) YAM2 (Yet Another Multidimensional Model): an extension of UML. In International Database Engineering & Applications Symposium (IDEAS 2002) (NASCIMENTO MA, TAMER Özsu M and ZAÏANE OR, Eds), pp 172-181, IEEE Computer Society Edmonton, Canada.
3. BASIN DA, DOSER J and LODDERSTEDT T (2006) Model driven security: from UML models to access control infrastructures. ACM Transactions on Software Engineering and Methodology 15(1), 39-91.
4. BERTINO E, JAJODIA S and SAMARATI P (1999) A flexible authorization mechanism for relational data management systems. ACM Transactions on Information Systems 17,101-140.
5. BLASCHKA M, SAPIA C, HÖFLING G and DINTER B (1998) Finding your way through multidimensional data models. In Proceedings of the Ninth International Conference on Database and Expert Systems Applications (DEXA'98) Lecture Notes in Computer Science, Vol. 1460, pp 198-203, Springer-Verlag, Vienna, Austria.
6. BONATTI P, DAMIANI E, DE CAPITANI DI VIMERCATI S and SAMARATI P (2001) An access control model for data archives. In Proceedings of the IFIP-TC11 International Conference on Information Security, Paris, France.
7. CONALLEN J (2000) Building Web Applications with UML. Object Technology Series. Addison-Wesley, Reading MA.
8. COTA S (2004) For certain eyes only. DB2 Magazine 9(1), 40-45.
9. DAMIANI E, DE CAPITANI DI VIMERCATI S, FERNANDEZ-MEDINA E and SAMARATI P (2002a) An access control system for SVG documents. In Research Directions in Data and Applications Security (GUDES E and SHENOI S, Eds), pp 219-230, Kluwer Academic Publisher, Boston.
10. DAMIANI E, DE CAPITANI DI VIMERCATI S, PARABOSCHI S and SAMARATI P (2002b) A fined-gralned access control system for XML documents. ACM Transactions on Information and Systems Security 5, 169-202.
11. DEVANBU P and STUBBLEBINE S (2000) Software engineering for security: a roadmap. In The Future of Software Engineering (FINKELSTEIN A, Ed), pp 227-239, ACM Press, New York.
12. DHILLON G and BACKHOUSE J (2000) Information system security management in the new millennium. Communications of the ACM 43(7), 125-128.
13. Directive 95/46/CE of the European Parliament and Council, dated 24 October, about People protection regarding the personal data management and the free circulation of these data. DOCE no. L281, 23/11/1995, P.0031-0050, 1995.
14. FERNANDEZ EB and PAN RY (2001) A pattern language for security models. In Proceedings of the 8th Conference on Patterns Languages of Programs (PLOP 2007), Illinois, USA,
15. FERNANDEZ-MEDINA E and PIATTINI M (2003) Designing secure database for OLS. In Database and Expert Systems Applications: 14th International Conference (DEXA 2003) Lecture Notes in Computer Science, Vol. 2736, Prague, Czech Republic (MARIK V, RETSCHITZEGGER W and STEPANKOVA O, Eds), pp 886-895, Springer, Berlin.
16. FERNANDEZ-MEDINA E and PIATTINI M (2004) Extending OCL for secure database design. In Proceedings of the International Conference on the Unified Modeling Language (UML 2004), Lecture Notes in Computer Science, Lisbon, Portugal Springer-Verlag, Berlin.
17. FERNÁNDEZ-MEDINA E, TRUJILLO J, VILLARROEL R and PIATTINI M (2004) Extending the UML for designing secure data warehouses. In Proceedings of the International Conference on Conceptual Modeling (ER 2004). Springer-Verlag, Shangai, China.
18. FERRARI E and THURAISINGHAM B (2000) Secure database systems. In Advanced Databases: Technology Design (PIATTINI M and DÍA O, Eds) Artech House, London.
19. FRANCE R and BIEMAN J (2001) Multi-view software evolution: a UML-based framework for evolving object-oriented software. In Proceedings of the International Conference on Software Maintenance, Florence, Italy, pp 386-397.
20. FRANKEL DS (2003) Model Driven Architecture. Applying MDA to Enterprise Computing. Indiana Wiley, Indianapolis.
21. GOGOLLA M and HENDERSON-SELLERS B (2002) Analysis of UML Stereotypes within the UML metamodel. In Proceedings of the 5th International Conference on the Unified Modeling Language - The Language and its Applications. Lecture Notes In Computer Science, Vol. 2460, Dresden, Germany, pp 84-99, Springer, Berlin.
22. GOLFARELLI M, MAIO D and RIZZI S (1998) The dimensional fact model: a conceptual model for data warehouses. International Journal of Cooperative Information Systems 7(2-3), 215-247.
23. GOLFARELLI M and RIZZI S (1998) A methodological framework for data warehouse design. In Proceedings of the 1st International Workshop on Data Warehousing and OLAP (DOLAP'98), Maryland, USA, pp 3-9.
24. HALL A and CHAPMAN R (2002) Correctness by construction: developing a commercial secure system. IEEE Software 19(1), 18-25.
25. HUSEMANN B, LECHTENBORGER J and VOSSEN G (2000) Conceptual data warehouse design. In Proceedings of the 2nd. International Workshop on Design and Management of Data Warehouses (DMDW'2000). Technical University of Aachen (RWTH). Stockholm, Sweden, pp 3-9.
26. INMON H (2002) Building the Data Warehouse, 3rd edn, John Wiley & Sons, USA.
27. JAJODIA S, SAMARATI P, SAPINO ML and SUBRAHMANIAN VS (2001) Flexible support for multiple access control policies. ACM Transactions on Database Systems 26, 214-260.
28. JÜRJENS J (2002) UMLsec: extending UML for secure systems development. In UML 2002 - The Unified Modeling Language, Model Engineering, Concepts and Tools. Lecture Notes in Computer Science, Vol. 2460. Dresden, Germany (JÉZÉQUEL USSMANN H and COOK S, Eds), pp 412-425, Springer, Berlin.
29. KATIC N, QUIRCHMAYR G, SCHIEFER J, STOLBA M and MIN TJOA A (1998) A prototype model for data warehouse security based on metadata. In Proceedings of the 9th International Workshop on Database and Expert Systems Applications (DEXA'98), pp 300-308, IEEE Computer Society, Vienna, Austria.
30. KIMBALL R (1996) The Data Warehousing Toolkit, John Wiley, New York, USA.
31. KIMBALL R and ROSS M (2002) The Data Warehousing Toolkit, John Wiley, New York, USA.
32. KIRKGÖZE R, KATIC N, STOLDA M and MIN TJOA A (1997) A security concept for OLAP. In Proceedings of the 8th International Workshop on Database and Expert System Applications (DEXA'97), pp 619-626, IEEE Computer Society, Toulouse, France.
33. KLEPPE A, WARMER J and BAST W (2003) MDA Explained; The Model Driven Architecture: Practice and Promise. Addison-Wesley, Reading, MA.
34. LEVINGER J (2002) Oracle label security. Administrator's guide. Release 2 (9.2). http://www.csis.gvsu.edu/Generallnfo/Oracle/network.920/a96578. pdf.
35. LODDERSTEDT T, BASIN D and DOSER J (2002) SecureUML: a UML-based modeling language for model-driven security. In Proceedings of the UML 2002. The Unified Modeling Language. Model Engineering, Languages Concepts, and Tools. 5th International Conference, pp 426-441, Springer, Dresden, Germany.
36. LUJÁN-MORA S, TRUJILLO J and SONG IY (2006) A UML profile for multidimensional modeling in data warehouses. Data & Knowledge Engineering 59(3), 725-769.
37. MARKS D, SELL P and THURAISINGHAM B (1996) MOMT: a multi-level object modeling technique for designing secure database applications. Journal of Object-Oriented Programming 9(4), 22-29.
38. MAZÓN JN, TRUJILLO J and LECHTENBÖ RGUER J (2007) An MDA approach for the development of data warehouses. Decision Support Systems, Accepted for publication. Available online. doi:10.1016/j.dss.2006.12.003.
39. MEDINA E and TRUJILLO J (2002a) Representing conceptual multidimensional properties using the common warehouse metamodel (CWM). In Proceedings of the Advances in Web-Age Information Management, 3rd International Conference, WAIM 2002. Lecture Notes In Computer Science, Vol. 2419, Beijing, China, pp 259-270, Springer, Berlin.
40. MEDINA E and TRUJILLO J (2002b) A standard for representing multidimensional properties: the common warehouse metamodel (CWM). In Proceedings of the Advances in Databases and Information Systems, 6th East European Conference, (ADBIS 2002). Lecture Notes in Computer Science, Vol. 2435, Bratislava, Slovakia, pp 232-247, Springer, Berlin.
41. OMG (2004a) Object Management Group. Common Warehouse Metamodel Specification, V1.1.
42. OMG (2004b) Object Management Group. Model Driven Architecture (MDA).
43. OMG (2004c) Object Management Group: Unified Modeling Language Specification 1.5.
44. PIATTINI M and FERNÁNDEZ-MEDINA E (2001) Specification of security constraint in UML. In Proceedings of the 35th Annual 2001 IEEE International Camahan Conference on Security Technology (ICCST 2001), pp 163-171, London, Great Britain.
45. POOLE J (2003) Model-Driven Data Warehousing. Burlingame, CA.
46. POOLE J, CHANG D, TOLBERT D and MELLOR D (2002) Common Warehouse Metamodel: An Introduction to the Standard for Data Warehouse Integration. John Wiley, New York, USA.
47. PRIEBE T and PERNUL G (2000) Towards OLAP security design - survey and research issues. In Proceedings of the 3rd ACM International Workshop on Data Warehousing and OLAP (DOLAP'00), pp 33-40, Washington DC, USA.
48. RABITTI F, BERTINO E, KIM W and WOELK D (1991) A model of authorization for next-generation database systems. ACM Transactions on Database Systems 16(1), 88-131.
49. ROSENTHAL A and SCIORE E (2000) View security as the basic for data warehouse security. In Proceedings of the 2nd International Workshop on Design and Management of Data Warehouse (DMDW'00), pp 8.1-8.8, Sweden.
50. SAMARATI P and DE CAPITANI DI VIMERCATI S (2000) Access control: policies, models, and mechanisms. In Foundations of Security Analysis and Design (FOCARDI R and GORRIERI R, Eds), pp 137-196, Springer Bertinoro, Italy.
51. SANDHU R, COYNE E, FEINSTEIN H and YOUMAN C (1996) Role-based access control models. IEEE Computer 29(2), 38-47.
52. SANDHU R and CHEN F (1998) The multilevel relational data model. ACM Transactions on Information and Systems Security (TISSEC) 1(1), 93-132.
53. SANDHU R, FERRAIOLO D and KUHN R (2000) The NIST model for role-based access control: towards a unified standard. In Proceedings of the Fifth ACM Workshop on Role-Based Access Control, pp 47-63, Berlin, Germany.
54. SANDHU R and SAMARATI L (1997) Authentication, access control, and intrusion detection. In CRC Handbook of Computer Science and Engineering (TUCKER A, Ed) CRC Press lnc, Boca Raton, FL.
55. SAPIA C (1999) On modeling and predicting query behavior in OLAP systems. In Proceedings of the International Workshop on Design and Management of Data Warehouses (DMDW'99), pp 1-10, Heidelberg, Germany.
56. SAPIA C, BLASCHKA M, HÖFLING G and DINTER B (1998) Extending the E/R model for the multidimensional paradigm. In Proceedings of the 1st International Workshop on Data Warehouse and Data Mining (DWDM'98), pp 105-116, Springer-Verlag, Singapore.
57. SMITH GW (1991) Modeling security-relevant data semantics. IEEE Transactions on Software Engineering 17(11), 1195-1203.
58. SOLER E, TRUJILLO J, FERNANDEZ-MEDINA E and PIATTINI M (2007a) SECRDW: an extension of the relational package from CWM for representing secure data warehouses at the logical level. In Proceedings of the Fifth International Workshop on Security in Information Systems (WOSIS 2007), pp 245-256, Accepted, Insticc Press, Funchal, Madeira, Portugal.
59. SOLER E, TRUJILLO J, FERNANDEZ-MEDINA E and PIATTINI M (2007b) A set of QVT relations to transform PIM to PSM in the design of secure data warehouses. In Proceedings of the IEEE Second International Symposium on Frontiers in Availability, Reliability and Security (FARES 2007), pp 644-654, Vienna, Austria.
60. THOMSEN E (1997) OLAP Solutions. John Wiley & Sons, Inc., New York, USA.
61. TOVAL A, NICOLÁS J, MOROS B and GARCÍA F (2002) Requirement reuse for improving information systems security: a practitioner's approach. Requirement Engineering journal 6(4), 205-219.
62. TRUJILLO J, PALOMAR M, GÓMEZ J and SONG IY (2001) Designing data warehouses with OO conceptual models. IEEE Computer, special issue on Data Warehouses 12(34), 66-75.
63. TRYFONA N, BUSBORG F and CHRISTIANSEN J (1999) starER: a conceptual model for data warehouse design. In Proceedings of the ACM 2nd International Workshop on Data Warehousing and OLAP (DOLAP'99), pp 3-8, ACM, Missouri, USA.
64. WANG L, JAJODIA S and WIJESEKERA D (2004) Securing OLAP data cubes against privacy breaches. In Proceedings of the IEEE Symposium on Security and Privacy, pp 161-178, Berkeley, California.
65. WARMER J and KLEPPE A (2003) The Object Constraint Language Second Edition. Getting Your Models Ready for MDA. Addison Wesley, Reading, MA.
66. WEIPPL E, MANGISENGI O, ESSMAYR W, LICHTENBERGER F and WINIWARTER W (2001) An authorization model for data warehouses and OLAP. In Proceedings of the Workshop on Security in Distributed Data Warehousing New Orleans, Louisiana, USA.