Model-Driven Development for secure information systems

Information and Software Technology

Volumn 51, Issue 5, 2009, Pages 809-814

  Fernández Medina, Eduardo ^a   Jurjens, Jan ^b   Trujillo, Juan ^c   Jajodia, Sushil ^d  

^a UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^b OPEN UNIVERSITY   (United Kingdom)

^c UNIVERSITY OF ALICANTE   (Spain)

^d George Mason University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 60849106337     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2008.05.010     Document Type: Editorial

References (72)

1. Alam M., Breu R., and Hafner M. Model-driven security engineering for trust management in SECTET. Journal of Software 2 1 (2007) 47-60
2. M. Alam, M. Hafner, R. Breu, A constraint based role based access control in the SECTET - a model-driven approach, in: Proceedings of the International Conference on Privacy, Security and Trust, Ontario, Canada, 2006.
3. M. Alam, J.P. Seifert, X. Zhang, Trusted SCCTET: a model-driven framework for trusted computing based systems, in: Proceedings of the International Enterprise Distributed Object Computing Conference, Annapolis, Maryland, USA, 2007, pp. 75-87.
4. Alghathbar K., and Wijesekera D. authUML: a three-phased framework to analyze access control specifications in use cases. Proceedings of the ACM Workshop on Formal Methods in Security Engineering (2003), ACM Press, Washington, USA 77-86
5. Anderson R. Security Engineering: A Guide to Building Dependable Distributed Systems (2001), John Wiley & Sons, Inc.
6. Basin D., Doser J., and Lodderstedt T. Model driven security for process-oriented systems. Proceedings of the ACM Symposium on Access Control Models and Technologies (2003), ACM Press, Como, Italy 100-109
7. Basin D., Doser J., and Lodderstedt T. Model driven security: from UML models to access control infrastructures. ACM Transactions on Software Engineering and Methodology 15 1 (2006) 39-91
8. L. Bass, F. Bachmann, R.J. Ellison, A.P. Moore, M. Klein, Security and survivability reasoning frameworks and architectural design tactics, in: SEI, 2004.
9. D.E. Bell, L.J. LaPadula, Secure Computer Systems: mathematical foundations, EDS-TR-73-278, MITRE MTR-2547, 1973.
10. B. Best, J.Jürjens, B. Nuseibeh, Model-based security engineering of distributed information systems using UMLsec, in: Proceedings of the International Conference on Software Engineering, Minneapolis, MN, USA, 2007, pp. 581-590.
11. Bézivin J. In search of a basic principle for model driven engineering. Upgrade 5 2 (2004) 21-24
12. A. Bragança, Methodological Approaches and Techniques for Model Driven Development of Software Product Lines, University of Minho: Gualtar, Braga, 204, 2007.
13. A. Bragança, R. Machado, Model Driven Development of Software Product Lines, in: Proceedings of the International Conference on the Quality of Information and Communications Technology, Lisbon, Portugal, 2007, pp. 199-203.
14. R. Breu, K. Burger, M. Hafner, J. Jürjens, G. Popp, V. Lotz, G. Wimmel, Key issues of a formally based process model for security engineering, in: Proceedings of the International Conference on Software and Systems Engineering and their Applications, 2003.
15. Breu R., Popp G., and Alam M. Model based development of access policies. International Journal on Software Tools for Technology Transfer 9 5 (2007) 457-470
16. C.C. Burt, R.R. Raje, M. Auguston, Model driven security: unification of authorization models for fine-grain access control, in: Proceedings of the International Enterprise Distributed Object Computing Conference, Brisbane, Australia, 2003, pp. 159-172.
17. Castano S., Fugini M., Martella G., and Samarati P. Database Security (1995), Addison-Wesley
18. A. Cuccuru, R. De Simone, T. Saunier, G. Siegel, Y. Sorel, P2I: an innovative MDA methodology for embedded real-time systems, in: Proceedings of the Euromicro Conference on Digital System Design, Porto, Portugal, 2005, pp. 26-33.
19. Dai L., and Cooper K. Modeling and performance analysis for security aspects. Science of Computer Programming 61 (2006) 58-71
20. I. Dubielewicz, B. Hnatkowska, Z. Huzar, L. Tuzinkiewicz, Evaluation of MDA-PSM database model quality in the context of selected non-functional requirements, in: Proceedings of the International Conference on Dependability of Computer Systems, Szklarska Poreba, Poland, 2007, pp. 19-26.
21. Fernandez-Medina E., Trujillo J., and Piattini M. Model driven multidimensional modeling of secure data warehouses. European Journal of Information Systems 16 (2007) 374-389
22. Fernandez-Medina E., Trujillo J., Villarroel R., and Piattini M. Access control and audit model for the multidimensional modeling of data warehouses. Decision Support Systems 42 (2006) 1270-1289
23. Fernandez-Medina E., Trujillo J., Villarroel R., and Piattini M. Developing secure data warehouses with a UML extension. Information Systems 32 6 (2007) 826-856
24. Hafner M., Breu R., Agreiter B., and Nowak A. SECTET: an extensible framework for the realization of secure inter-organizational workflows. Internet Research 16 5 (2006) 491-506
25. C.B. Haley, J.D. Moffet, R. Laney, B. Nuseibeh, A framework for security requirements engineering, in: Proceedings of the Software Engineering for Secure Systems Workshop, Shanghai, China, 2006, pp. 35-42.
26. Harmon P. The OMG's model driven architecture and BPM. Newsletter of Business Process Trends (2004)
27. Jajodia S., Samarati P., Sapino M.L., and Subrahmanian V.S. Flexible support for multiple access control policies. ACM Transactions on Database Systems 26 (2001) 214-260
28. Jézéquel J. Model driven design and aspect weaving. Software and Systems Modeling 7 2 (2008) 209-218
29. A.K. Jones, R.J. Lipton, L. Snyder, A linear time algorithm for deciding security, in: Proceedings of the Annual Symposium on Foundations of Computer Security, Houston, Texas, USA, 1976, pp. 33-41.
30. J. Jürjens, UMLsec: extending UML for secure systems development, in: J. Jézéquel, H. Hussmann, S. Cook (Eds.), UML 2002 - The Unified Modeling Language, Model Engineering, Concepts and Tools, LNCS, vol. 2460, Springer, Dresden, Germany, 2002, pp. 412-425.
31. Jürjens J. Secure Systems Development with UML (2004), Springer-Verlag
32. Jürjens J. A domain-specific language for cryptographic protocols based on streams. Journal of Logic and Algebraic Programming, Special Issue on Streams and Algebra (2008)
33. J. Jürjens, J. Schreck, P. Bartmann, Model-based security analysis for mobile communications, in: Proceedings of the International Conference on Software Engineering, IEEE Computer Society, Leipzig, Germany, 2008.
34. Jürjens J., and Shabalin P. Tools for Secure Systems Development with UML. Invited Submission to the FASE 2004/05 Special Issue of the International Journal on Software Tools for Technology Transfer 9 5-6 (2007) 527-544
35. Kleppe A., Warmer J., and Bast W. MDA Explained: The Model Driven Architecture: Practice and Promise (2003), Addison-Wesley
36. A. Kraus, A. Knapp, N. Koch, Model-driven generation of web applications in UWE, in: Proceedings of the International Workshop on Model-Driven Web Engineering, Como, Italy, 2007.
37. Lampson B.W. Protection. Proceedings of the Symposium on Information Sciences and Systems (1971), Princeton University 437
38. B. Li, S. Liu, Z. Yu, Applying MDA in traditional database-based application development, in: Proceedings of the International Conference on Computer Supported Cooperative Work in Design, Coventry, UK, 2005, pp. 1038-1041.
39. B. Lima, J.G. Sousa, D. Lopes, Using MDA to support hypermedia document sharing, in: Proceedings of the International Conference on Software Engineering Advances, French Riviera, France, 2007, pp. 65-71.
40. T. Lodderstedt, D. Basin, J. Doser, SecureUML: a UML-based modeling language for model-driven security, in: Proceedings of the UML 2002. The Unified Modeling Language. Model Engineering, Languages Concepts, and Tools. Fifth International Conference, Dresden, Germany, 2002, Springer, pp. 426-441.
41. S. Lu, W.A. Halang, L. Zhang, A component-based UML profile to model embedded real-time systems designed by the MDA approach, in: Proceedings of the International Conference on Embedded and Real-Time Computing Systems and Applications, Hong Kong, China, 2005, pp. 563-566.
42. Luján-Mora S., Trujillo J., and Song I.Y. A UML profile for multidimensional modeling in data warehouses. Data & Knowledge Engineering 59 3 (2006) 725-769
43. J.N. Mazón, J. Trujillo, An MDA approach for the development of data warehouses, Decision Support Systems Accepted for publication, Available online, doi:10.1016/j.dss.2006.12.003 (2007).
44. J.N. Mazón, J. Trujillo, A model driven modernization approach for automatically deriving multidimensional models in data warehouses, in: Proceedings of the International Conference on Conceptual Modeling, Auckland, New Zealand, 2007, pp. 56-71.
45. J.N. Mazón, J. Trujillo, A model-driven goal-oriented requirement engineering approach for data warehouses, in: Proceedings of the Advances in Conceptual Modeling - Foundations and Applications, ER 2007 Workshops CMLSA, FP-UML, ONISW, QoIS, RIGiM, SeCoGIS, Auckland, New Zealand, 2007, pp. 255-264.
46. S. Meliá, C. Cachero, An MDA approach for the development of web applications, in: Proceedings of the International Conference on Web Engineering, Munich, Germany, 2004, pp. 300-305.
47. Meliá S., and Gomez J. The WebSA approach: applying model driven engineering to web applications. Journal of Web Engineering 5 2 (2006) 121-149
48. S. Mellor, K. Scott, A. Uhl, D. Weise, MDA Distilled: Principles of Model-Driven Architecture, Addison Wesley, 2004.
49. Mens T., and Van Corp P. A taxonomy of model transformation. Electronic Notes in Theoretical Computer Sciences 152 (2006) 125-142
50. Meservy T., and Fenstermacher K. Transforming software development: an MDA road map. Computer 38 9 (2005) 52-58
51. H. Mouratidis, P. Giorgini, Integrating Security and Software Engineering: Advances and Future Vision, IGI Global, 2006.
52. E. Oladimeji, S. Supakkul, L. Chung, A model-driven approach to architecting secure software, in: Proceedings of the International Conference on Software Engineering and Knowledge Engineering, Boston, USA, 2007, pp. 535-551.
53. OMG, Common Warehouse Metamodel Specification, 2001.
54. OMG, Meta Object Facility Specification, 2002.
55. OMG, Model Driven Architecture Guide Version 1.0.1, 2003.
56. OMG, Meta Object Facility 2.0 Query/View/Transformation Specification, 2007.
57. OMG, Unified Modeling Language Infrastructure, 2007.
58. J. Osis, E. Asnina, Enterprise modeling for information system development within MDA, in: Proceedings of the Annual Hawaii International Conference on System Sciences, Waikoloa, Big Island, Hawaii, 2008, pp. 490-501.
59. J. Osis, E. Asnina, A. Grave, MDA oriented computation independent modeling of the problem domain, in: Proceedings of the International Working Conference on Evaluation of Novel Approaches to Software Engineering, Barcelona, Spain, 2007, pp. 66-71.
60. Reznik J., and Ritter T. Model driven development of security aspects. Electronic Notes in Theoretical Computer Sciences 163 (2007) 65-79
61. A. Rodriguez, E. Fernandez-Medina, M. Piattini, Analysis-level classes from secure business processes through model transformations, in: Proceedings of the International Conference on Trust, Privacy and Security in Digital Business, Regensburg, Germany, 2007, pp. 104-114.
62. Rodriguez A., Fernandez-Medina E., and Piattini M. An MDA approach to develop secure business processes through a UML 2.0 extension, computer systems. Science and Engineering 22 5 (2007) 307-319
63. A. Rodriguez, E. Fernández-Medina, M. Piattini, Towards CIM to PIM transformation: from secure business processes defined in BPMN to use-cases, in: Proceedings of the International Conference on Business Process Management, Brisbane, Australia, 2007, pp. 408-415.
64. E. Soler, J. Trujillo, E. Fernandez-Medina, M. Piattini, SECRDW: an extension of the relational package from CWM for representing secure data warehouses at the logical level, in: Proceedings of the International Workshop on Security in Information Systems, Funchal, Madeira, Portugal, 2007, pp. 245-256.
65. W. Tan, L. Ma, J. Li, Z. Xiao, Application MDA in a conception design environment, in: Proceedings of the International Multi-Symposiums on Computer and Computational Sciences, Hangzhou, China, 2006, pp. 702-704.
66. Vara J.M., De Castro V., and Marcos E. WSDL automatic generation from UML models in a MDA framework. International Journal of Web Services Practices 1 1-2 (2005) 1-12
67. J.M. Vara, B. Vela, J.M. Cavero, E. Marcos, Model transformation for object-relational database development, in: Proceedings of the ACM Symposium on Applied Computing, Seoul, Korea, 2007, pp. 1012-1019.
68. B. Vela, C.J. Acuña, E. Marcos, A model driven approach for XML database development, in: Proceedings of the International Conference on Conceptual Modeling, Shanghai, China, 2004, pp. 780-794.
69. Vela B., Fernandez-Medina E., Marcos E., and Piattini M. Model Driven Development of Secure XML Databases. ACM Sigmod Record 35 3 (2006) 22-27
70. Y. Wang, X. Zhou, L. Liang, C. Peng, A MDA based SoC Modeling Approach using UML and SystemC, in: Proceedings of the International Conference on Computer and Information Technology, Baridhara, Bangladesh, 2006, pp. 245-251.
71. Woodside C.M., Petriu D.C., Petriu D.B., Xu J., Israr T., Georg G., France R., Bieman J.M., Houmb S.H., and Jürjens J. Performance analysis of security aspects by weaving scenarios from UML models, special issue on software and performance. Journal of Systems and Software (2008)
72. B. Yu, C. Zhang, Y. Zhao, Transform from models to service description based on MDA, in: Proceedings of the Asia-Pacific Conference on Services Computing, GuangZhou, China, 2006, pp. 605-608.