An engineering process for developing Secure Data Warehouses

Information and Software Technology

Volumn 51, Issue 6, 2009, Pages 1033-1051

  Trujillo, Juan ^a   Soler, Emilio ^b   Fernández Medina, Eduardo ^c   Piattini, Mario ^c  

^a UNIVERSITY OF ALICANTE   (Spain)

^b UNIVERSITY OF MATANZAS   (Cuba)

^c UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

Author keywords

Access control; Data Warehouses; i*; Security requirements engineering

Indexed keywords

ACCESS CONTROL; DIELECTRIC WAVEGUIDES; EMBEDDED SYSTEMS; ENGINEERING; LIFE CYCLE; REQUIREMENTS ENGINEERING; SECURITY SYSTEMS;

ENGINEERING PROCESS; MODEL DRIVEN ARCHITECTURES; NEW APPROACHES; NON-FUNCTIONAL REQUIREMENTS; OBJECT MANAGEMENT GROUPS; REQUIREMENTS ANALYSIS; SECURITY REQUIREMENTS; SECURITY REQUIREMENTS ENGINEERING; STANDARD SOFTWARES;

DATA WAREHOUSES;

EID: 62349117518     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2008.12.003     Document Type: Article

References (53)

1. A. Abelló, J. Samos, F. Saltor, A framework for the classification and description of multidimensional data model, in: Proceedings of the 12th International Conference on Database and Expert Systems Aplications (DEXA'01), Munich, Germany, 2001, pp. 668-677.
2. J.M. Cavero, M. Piattini, E. Marcos, MIDEA: a multidimensional Data Warehouse methodology, in: Proceedings of the 3rd International Conference on Enterprise Information Systems (ICEIS'01), Setubal, Portugal, 2001, pp. 138-144.
3. Crook R., Ince D.C., and Nuseibeh B. Modelling access policies using roles in requirements engineering. Information & Software Technology 45 (2003) 979-991
4. P. Devanbu, S. Stubblebine, Software engineering for security: a roadmap, in: Proceedings of the Conference on The Future of Software Engineering, Limerick, Ireland, 2000, pp. 227-239.
5. W. Essmayr, E. Weippl, F. Lichtenberger, W. Winiwarter, O. Mangisengi, An authorization model for Data Warehouses and OLAP, in: Workshop on Security in Distributed Data Warehousing, in Conjunction with 20th IEEE Symposium on Reliable Distributed Systems (SRDS'2001), USA, 2001, pp. 9-13.
6. Fernández-Medina E., Trujillo J., Villarroel R., and Piattini M. Developing Secure Data Warehouses with a UML extension. Information Systems 32 (2007) 826-856
7. Fernández-Medina E., Trujillo J., Villarroel R., and Piattini M. Access control and audit model for the multidimensional modeling of DWs. Decision Support Systems 42 (2006) 1270-1289
8. Ferraiolo D.F., Kuhn D.R., and Chandramouli R. Role-Based Access Control (2003), Artech House Inc., Norwood, MA, USA
9. J.F. Freeman, R.B. Neely, On security policy modeling, in: Proceedings of the 8th Annual Conference on Computer Assurance: Practical Paths to Assurance (COMPAS'93), Colorado Springs, 1993, pp. 61-69.
10. P. Giorgini, S. Rizzi, M. Garzetti, Goal-oriented requirement analysis for Data Warehouse design, in: Proceedings of the 8th International Workshop on Data Warehousing and OLAP (DOLAP'05), Bremen, Germany, 2005, pp. 47-56.
11. M. Golfarelli, S. Rizzi, A methodological framework for Data Warehouse design, in: Proceedings of the 1st International Workshop on Data Warehousing and OLAP (DOLAP'98), Bethesda, MD, USA, 1998, pp. 3-9.
12. Q. He, A. Antón, A framework for modeling privacy requirements in role engineering, in: Proceedings of the 9th International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ'03), Klagenfurt/Velden, Austria, 2003, pp. 137-146.
13. Q. He, Requirements-Based Access Control Analysis and Policy Specification, PhD Thesis, North Carolina State University, 2005.
14. S. Jajodia, R. Sandhu, Polyinstantiation for cover stories, in: Proceedings of the 2nd European Symposium on Research in Computer Security (ESORICS'93), Toulouse, France, 1992, pp. 307-328.
15. K. Katic, G. Quirchmayr, J. Schiefer, M. Stolba, A.M. Tjoa, A prototype model for Data Warehouse security based on metadata, in: Proceedings of the 9th International Workshop on Database and Expert Systems Applications (DEXA'98), Vienna, Austria, 1998, pp. 300-309.
16. R. Kirkgöze, N. Katic, M. Stolba, A.M. Tjoa, A security concept for OLAP, in: Proceedings of the 8th International Workshop on Database and Expert System Applications (DEXA'97), Toulouse, France, 1997, pp. 619-626.
17. Kimball R., and Ross M. Data Warehouse Toolkit (2002), John Wiley&Songs Publishing, USA
18. Kimball R., Reeves L., Ross M., and Thornthwaite W. The Data Warehouse Lifecycle Toolkit (1998), John Wiley&Sons Publishing, USA
19. M. Koch, L.V. Mancini, F. Parisi-Presicce, Conflict detection and resolution in access control policy specifications, in: Proceedings of the 5th International Conference on Foundations of Software Science and Computation Structures (FoSSaCS'02), LNCS, vol. 2303, Grenoble, France, 2002, pp. 223-238.
20. Kroll P., and Kruchten P. The Rational Unified Process Made Easy: A Practitioner's Guide to the RUP (2003), Addison Wesley
21. S. Luján, J. Trujillo, A comprehensive method for Data Warehouse design, in: Proceedings of the 5th International Workshop on Design and Management of Data Warehouses (DMDW'2003), Berlin, Germany, 2003, pp. 1.11-1.14.
22. S. Luján, J. Trujillo, A Data Warehouse engineering process, in: Proceedings of the 3rd International Conference on Advances in Information Systems (ADVIS'04), Izmir, Turkey, 2004, pp. 20-22.
23. Luján-Mora S., Trujillo J., and Song I.Y. A UML profile for multidimensional modeling in Data Warehouses. Data & Knowledge Engineering (DKE) 59 (2006) 725-769
24. J.N. Mazón, J. Trujillo, M. Serrano, M. Piattini, Designing Data Warehouses: from business requirement analysis to multidimensional modeling, in: Proceedings of the 1st International Workshop on Requirements Engineering for Business Needs and IT Alignment (REBNITA'05), Paris, France, 2005, pp. 44-53.
25. Mazón J.M., and Trujillo J. An MDA approach for the development of Data Warehouses. Decision Support Systems 45 (2008) 41-58
26. J.N. Mazón, J. Pardillo, J. Trujillo, A model-driven goal-oriented engineering approach for Data Warehouses, in: Proceedings of the International Workshop on Requirements, Intentions and Goals in Conceptual Modelling (RIGiM'07), LNCS, vol. 4802, Auckland, New Zealand, 2007, pp. 255-264.
27. N.R. Mead, E.D. Hough, T.R. Stehney, Security quality requirements engineering (SQUARE), TR CMU/SEI-2005-TR-009, Software Engineering Institute, Carnegie Mellon University, Pittsburgh, USA, 2005.
28. J.D. Moffett, C.B. Haley, B. Nuseibeh, Core security requirements artefacts, Technical Report, vol. 23, Department of Computing, The Open University, Milton Keynes, UK, 2004, pp. 1-47.
29. D. Moody, M. Kortink, From enterprise models to dimensional models: a methodology for Data Warehouse and Data Mart design, in: Proceedings of the 3rd International Workshop on Design and Management of Data Warehouses (DMDW'00), Stockholm, Sweden, 2000, p. 110.
30. H. Mouratidis, P. Giorgini, G. Manson, Integrating security and systems engineering: towards the modeling of secure information systems, in: Proceedings of the 15th Conference on Advanced Information Systems Engineering (CAiSE'03), Klagenfurt, Austria, 2003, pp. 63-78.
31. J.M. Mukerji, MDA Guide Version 1.0.1, OMG, 2003.
32. OMG, Software & Systems Process Engineering Meta-Model Specification, ver. 1.1, 2005. .
33. OMG, UML Infrastructure Specification, v2.0, 2006. .
34. OMG, MOF 2.0 QVT Final Adopted Specification, 2005. .
35. OMG, MOF Model to Text Transformation Language, OMG Adopted Specification v1.0, 2008. http://www.omg.org/spec/MOFM2T/1.0/PDF.
36. F. Paim, J. Castro, DWARF: an approach for requirements definition and management of Data Warehouse systems, in: Proceedings of the 11th IEEE International Conference on Requirements Engineering (RE'03), Monterey Bay, CA, USA, 2003, pp. 75-84.
37. Perry W.E. Effective Methods for Software Testing. third ed. (2006), John Wiley& Sons Publishing, USA
38. N. Prakash, Y. Singh, A. Gosain, 2004. Informational scenarios for Data Warehouse requirements elicitation, in: Proceedings of the 23rd International Conference on Conceptual Modeling (ER'04), LNCS, vol. 3288, Shanghai, China, 2006, pp. 205-216.
39. T. Priebe, G. Pernul, Towards OLAP security design - survey and research issues, in: Proceedings of the 3rd ACM International Workshop on Data Warehousing and OLAP (DOLAP'00), VA, USA, 2000, pp. 33-40.
40. T. Priebe, G. Pernul, A pragmatic approach to conceptual modeling of OLAP security, in: Proceedings of the 20th International Conference on Conceptual Modeling (ER'01), Yokohama, Japan, LCCS, vol. 2224, 2001, pp. 311-324.
41. A. Rosenthal, E. Sciore, View security as the basic for Data Warehouse security, in: Proceedings of the Second International Workshop on Design and Management of Data Warehouses (DMDW'00), Stockholm, Sweden, 2000, pp. 1-8.
42. S. Rizzi, A. Abelló, J. Lechtenbörger, J. Trujillo, Research in Data Warehouse modeling and design: dead or alive? in: Proceedings of the 9th International Workshop on Data Warehousing and OLAP (DOLAP'06), Arlington, VA, USA, 2006, pp. 3-10.
43. Saltor F., Oliva M., Abelló A., and Samos J. Building secure data warehouse schemas from federated information systems. In: Bestougeff H., Dubois J.E., and Thuraisingham B. (Eds). Heterogeneous Information Exchange and Organizational Hubs (2002), Kluwer Academic Publisher., Dordrecht, The Netherlands 123-134 ISBN: 1-4020-0649-7
44. P. Samarati, S. De Capitani di Vimercati, Access control: policies, models, and mechanisms, in: International School on Foundations of Security Analysis and Design (FOSAD'00), LNCS, vol. 2171, Bertinoro, Italy, 2000, pp. 137-196.
45. Schneier B. Attack Trees: Modeling Security Threats. Dr. Dobb's Journal 24 (1999) 21-29
46. Sloman M., and Lupu E. Security and management policy specification. IEEE Network 16 (2002) 10-19
47. E. Soler, J. Trujillo, E. Fernandez-Medina, M. Piattini, A Framework for the development of Secure Data Warehouses based on MDA and QVT, in: Proceedings of the Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria, 2007, pp. 294-300.
48. Soler E., Trujillo J., Fernandez-Medina E., and Piattini M. Building a secure star schema in Data Warehouses by an extension of the relational package from CWM. Computer Standards & Interfaces 30 (2008) 341-350
49. E. Soler, J. Trujillo, E. Fernandez-Medina, M. Piattini, A set of QVT relations to transform PIM to PSM in the design of Secure Data Warehouses, in: Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria, 2007, pp. 644-654.
50. E. Soler, J. Trujillo, E. Fernandez-Medina, M. Piattini, Application of QVT for the development of Secure Data Warehouses: a case study, in: Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria, 2007, pp. 829-836.
51. Villarroel R., Fernández-Medina E., and Piattini M. A UML 2.0/OCL extension for designing Secure Data Warehouses. Journal of Research and Practice in Information Technology 38 (2006) 31-43
52. R. Winter, B. Strauch, A method for demand-driven information requirements analysis in Data Warehousing projects, in: Proceedings of the 36th Hawaii International Conference on System Sciences (HICSS'03)-Track 8, Big Island, HI, USA, IEEE Computer Society, 2003, pp. 231.1.
53. E. Yu, Modelling Strategic Relationships for Process Reengineering, Ph.D. Thesis, University of Toronto, Canada, 1996.