Designing Secure Data Warehouses by Using MDA and QVT

Journal of Universal Computer Science

Volumn 15, Issue 8, 2009, Pages 1607-1641

  Soler, Emilio ^a   Trujillo, Juan ^b   Blanco, Carlos ^c   Fernández Medina, Eduardo ^c  

^a UNIVERSITY OF MATANZAS   (Cuba)

^b UNIVERSITY OF ALICANTE   (Spain)

^c UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

Author keywords

Data Warehousing; MDA; QVT; Security

Indexed keywords

EID: 69949118455     PISSN: 0958695X     EISSN: 09486968     Source Type: Journal    
DOI: None     Document Type: Article

References (61)

1. Abelló, A., Samos, J., Saltor, F.: "YAM2: a multidimensional conceptual model extending UML", Information Systems, 31, 6 (2006), 541-567.
2. Basin D., Doser, J.: "Model Driven Security: From UML Models to Access Control Infrastructures", ACM Transactions on Software Engineering and Methodology, 15, 1 (2006), 39-91.
3. Best, B., Jürjens, J., Nuseibeh, B.: "Model-Based Security Engineering of Distributed Information Systems Using UMLsec", 29th International Conference on Software Engineering, Minneapolis, USA (2007), 581-590.
4. Binh, N. T., Tjoa, A. M., Wagner, R.: "An Object Oriented Multidimensional Data Model for OLAP. Web-Age Information Management", 1st International Conference of Web-Age Information Management (WAIM'00), Shanghai, China (2000), 69-82.
5. Blanco, C., Garca-Rodrguez de Guzmn, I., Fernández-Medina, E., Trujillo, J., Piattini, M.: "Applying QVT in order to implement Secure Data Warehouses in SQL Server Analysis Services", Journal of Research and Practice in Information Technology, 41, 2 (2009), 119-138.
6. Eclipse, http://www.eclipse.org
7. Burt, C. C., Bryant, B. R., Raje, R. R., Olson, A. M., Auguston, M.: "Model Driven Security: Unification of Authorization Models for Fine-Grain Access Control", Proc. 7th IEEE Int. Enterprise Distributed Object Computing Conf., Brisbane, Australia (2003), 159-171.
8. Canfora, G., Penta, M. D.: "New Frontiers of Reverse Engineering", 29th International Conference on Software Engineering, Workshop on the Future of Software Engineering, FOSE'07, Minneapolis, USA (2007), 326-341.
9. Devanbu P., Stubblebine, S.: "Software Engineering for Security: a Roadmap", Proc. Conf. on The Future of Software Eng., Limerick, Ireland (2000), 227-239.
10. Dhillon G., Backhouse, J.: "Information Systems Security Management in the New Millenium", Communications of the ACM, 43, 7 (2000),125-128.
11. Fernández-Medina, E., Piattini, M.: "Extending OCL for Secure Database Design", Proc. 7th Int. Conference on the Unified Modeling Languages and Applications, Lisboa, Potugal (2004), 380-394.
12. Fernández-Medina, E., Trujillo, J., Villarroel, R., Piattini, M.: "Access Control and Audit Model for the Multidimensional Modeling of Data Warehouses", Decision Support Systems, 42, 3 (2006), 1270-1289.
13. Fernández-Medina, E., Trujillo, J., Villarroel, R., Piattini M.: "Developing Secure Data Warehouses with a UML Extension", Information Systems, 32, 6 (2007), 826-856.
14. Giorgini, P., Mouratidis, H., Zannone, Z.: "Modelling Security and Trust with Secure Tropos", Integrating Security and Software Engineering: Advances and Future Visions, Idea Group Publishing (2006).
15. Golfarelli, M., Maio, D., Rizzi, S.: "The Dimensional Fact Model: A Conceptual Model for Data Warehouses", International Journal of Cooperative Information Systems, 7, (2-3) (1998), 215-247.
16. Grabosky, P.: "Security in the 21st Century", Security Journal, 20, 1 (2007),9-11.
17. Hafner, M., Alam, M., Breu, R.: "Towards a MOF/QVT-Based Domain Architecture for Model Driven Security", Proc. Model Driven Engineering Languages and Systems, Genova, Italy (2004), 230-244.
18. Jajodia, S., Wijesekera, D.: "Security in Federated Database Systems", Information Security Technical Report, 6, 2 (2001), 69-79.
19. Jeloka, S.: "Oracle Label Security Administrator's Guide, 11g" (2007).
20. Jürjens, J.: "UMLsec: Extending UML for secure systems development", 7th Int. Conference on the Unified Modeling Languages and Applications (UML'02), Dresden, Germany (2002), 412-425.
21. Jürjens, J.: "Secure Systems Development with UML", Springer Academic Publishers (2004).
22. Jürjens, J., Shabalin, P.: "Tools for Secure Systems Development with UML", International Journal on Software Tools for Technology Transfer, 9, (5-6) (2007), 527-544.
23. Jürjens, J., Schreck, J., Bartmann, P.: "Model-based Security Analysis for Mobile Communications", 30th International Conference on Software Engineering, Leipzig, Germany (2008), 683-692.
24. Jürjens, J.: "A Domain-specific Language for Cryptographic Protocols based on Streams", Journal of Logic and Algebraic Programming, Special issue on Streams and Algebra, 78, 2 (2009), 54-73.
25. Katic, N., Quirchmayr, G., Schiefer, J., Stolba, M., Tjoa, A. M.: "A Prototype Model for DW Security Based on Metadata", Proc. 9th Int. Workshop on DB and Expert Systems Applications, Vienna, Austria (1998), 300-308.
26. Khusidman, V., Ulrich, W.: "Architecture-Driven Modernization: Transforming the Enterprise", DRAFT V.5, http://www.omg.org/docs/admtf/07-12-01.pdf, OMG: 7, (2007).
27. Kimball, R., Ross, M.: "The Data Warehousing Toolkit", Second Edition; John Wiley & Sons, Inc./ New York (2002).
28. Kirkgöze, R., Katic, N., Stolda, N., Tjoa, A. M.: "A Security Concept for OLAP", Proc. 8th Int. Workshop on Database and Expert System Applications, Toulouse, France (1997), 619-626.
29. Lang, U., Schreiner, R.: "OpenPMF: a Model-Driven Security Framework for Distributed Systems", Proc. of the Information Security Solutions Europe, Berlin, Germany (2004).
30. Lodderstedt, T., Basin, D., Doser, J.: "SecureUML: A UML-Based Modeling Language for Model-Driven Security", Proc. 5th Int. Conf. of UML, Dresden, Germany (2002), 426-441.
31. Luján-Mora, S., Trujillo, J., Song, I.-Y.: "A UML profile for multidimensional modeling in data warehouses", DKE (Data & Knowledge Engineering), 59, 3 (2006), 725-769.
32. Mazón, J.-N., Trujillo, J.: "A Model Driven Modernization Approach for Automatically Deriving Multidimensional Models in Data Warehouses", 26th International Conference on Conceptual Modeling (ER'07), Auckland, New Zealand (2007), 56-71.
33. Mazón, J.-N., Trujillo, J., Serrano, M., Piattini, M.: "A MDA Approach for the Development of Data Warehouses", Decision Support Systems, 45,1 (2008),41-58.
34. McGraw, G.: "Software Assurance for Security", IEEE Computer, 32,4 (1999),103-105.
35. McGraw, G.: "Building Secure Software: Better than Protecting Bad Software", IEEE Software, 19, 6 (2002), 57-59.
36. Miller J., Mukerji, J.: "MDA Guide Version 1.0.1", 2003.
37. Nakamura, Y., Tatsubori, M., Imamura, T., Ono, K.: "Model-driven security based on a Web services security architecture", Proc. IEEE Int. Conference on Services Computing, Orlando, USA (2005), 7-15.
38. OMG,"Common Warehouse Metamodel Specification 1.1". http://www.omg.org/technology/documents/formal/cwm.htm (2003).
39. OMG, "MOF 2.0 QVT Final Adopted Specification", (2005).
40. OMG, "ADM Glossary of Definitions and Terms", http://adm.omg.org/ADM Glossary Spreadsheet pdf.pdf, OMG: 34, (2006).
41. Paim F. R. S., Castro, J.: "DWARF: An Approach for Requirements Definition and Management of Data Warehouse Systems", IEEE International Conference on Requirements Engineering, Monterey Bay, California, USA (2003),75-84.
42. Prat, N., Akoka, J., Comyn-Wattiau, I.: "A UML-based data warehouse design method", Decision Support Systems, 42, 3 (2006), 1449-1473.
43. Priebe T., Pernul, G.: "A Pragmatic Approach to Conceptual Modeling of OLAP Security", Proc. 20th Int. Conference on Conceptual Modeling (ER'01), Yokohama, Japan (2001), 311-324.
44. Rosenthal A., Sciore, E.: "View Security as the Basic for DW Security", Proc. 2nd Workshop Design and Management of DW, Stockholm, Sweden (2000),8.1-8.8.
45. Saltor, F., Oliva, M., Abell, A., Samos, J.: "Building Secure Data Warehouse Schemas from Federated Information Systems", in Heterogeneous Inf. Exchange and Organizational Hubs., D. T. Bestougeff, Kluwer Academic (2002).
46. Sapia, C., Blaschka, M., Höfling G., Dinter, B.: Extending the E/R Model for the Multidimensional Paradigm, 1st Int. Conference on Conceptual Modeling (ER'98), Singapore (1998), 105-116.
47. Shoshani, A.: "OLAP and Statistical Databases: Similarities and Differences", Proc. of the 16th ACM Symposium on Principles of Database Systems (PODS'97), Tucson, Arizona (1997), 185-196.
48. Simitsis, A., Vassiliadis, P.: "A method for the mapping of conceptual designs to logical blueprints for E processes", Decision Support Systems, 45, 1 (2008), 22-40.
49. Sivanandam S. N., Karpagam, G. R.: "A Novel Approach for Implementing Security Services", Academic Open Internet Journal, 13,13 (2004).
50. SmartQVT, http://smartqvt.elibel.tm.fr, (2007).
51. Soler, E., Trujillo, J., Fernández-Medina, E., Piattini, M.: "A set of QVT relations to transform PIM to PSM in the Design of Secure Data Warehouses", Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria (2007), 644-654.
52. Soler, E., Trujillo, J., Fernández-Medina, E., Piattini, M.: "Application of QVT for the Development of Secure Data Warehouses: A case study", Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria (2007), 829-836.
53. Soler, E., Trujillo, J., Fernández-Medina, E., Piattini, M.: "A Framework for the Development of Secure Data Warehouses based on MDA and QVT", Second International Conference on Availability, Reliability and Security (ARES'07), Vienna, Austria (2007), 294-300.
54. Soler, E., Trujillo, J., Fernández-Medina, E., Piattini, M.: "Building a secure star schema in data warehouses by an extension of the Relational Package from CWM", Computer Standards & Interfaces, 30, 6 (2008), 341-350.
55. Soler, E., Stefanov, V., Mazón, J.-N., Trujillo, J., FernándezMedina, E., Piattini, M.: "Modelado de Requisitos de Seguridad para Almacenes de Datos", XI Iberoamerican Workshop on Requirements Engineering and Software Environments (IDEAS'08), Pernambuco, Brasil (2008), 281-294.
56. Thuraisingham, B.: "Security Issues for Federated Database Systems", Computer and Security, 13, 6 (1994), 509-525.
57. Thuraisingham, B., Kantarcioglu, M., Iyer, S.: "Extended RBAC-based design and implementation for a secure data warehouse", International Journal of Business Intelligence and Data Mining, 2, 4 (2007), 367-382.
58. Trujillo, J., Luján-Mora, M.: "A UML Based Approach for Modeling E Processes in Data Warehouses", Proc. 22th Int. Conference on Conceptual Modeling (ER'03), Chicago, Illinois, USA (2003), 13-16.
59. Tryfona, N., Busborg, F., Borch, J. G.: "StarER: A Conceptual Model for Data Warehouse Design", Second International Workshop on Data Warehousing and OLAP (DOLAP'99), Missouri, USA (1999), 3-8.
60. Vela, B., Fernández-Medina, E., Marcos, E., Piattini, M.: "Model Driven Development of Secure XML Databases", SIGMOD Record, 35, 3 (2006), 22-27.
61. Villarroel, V., Fernández-Medina, E., Piattini, M.: "A UML 2.0/OCL Extension for Designing Secure Data Warehouses", Journal of Research and Practice in Information Technology, 38, 1 (2006), 31-43.