Model driven security accreditation (MDSA) for agile, interconnected it landscapes

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2009, Pages 13-22

  Lang, Ulrich ^a   Schreiner, Rudolf ^b  

^a ObjectSecurity   (United States)

^b ST JOHN S COLLEGE   (United Kingdom)

Author keywords

Accreditation; Common criteria; Compliance; Model mapping; Model merging; Model driven compliance; Model driven security; Model driven security accreditation

Indexed keywords

COMMON CRITERIA; COMPLIANCE; COMPLIANCE MODEL; MODEL-DRIVEN; SECURITY MODEL;

ACCREDITATION; AGILE MANUFACTURING SYSTEMS; COST REDUCTION; INFORMATION TECHNOLOGY; INTERCONNECTION NETWORKS; MERGING; OBJECT ORIENTED PROGRAMMING;

NETWORK SECURITY;

EID: 74049149139     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1655168.1655173     Document Type: Conference Paper

References (20)

1. CCRA, Common Criteria v3., 2006. www.commoncriteriaportal.org
2. Davis, M. et al. SOA Information Assurance Concerns (presentation), ISSA / The Security Network. 2008. http://www.sdissa.org/
3. Hallberg, J., Bengtsson, J., and Hallberg, N. Modeling and Assessment of Systems Security. 2008. Proceedings of MODSEC2008. http://www.comp.lancs.ac.uk/ modsec/papers/modsec08-submission-6.pdf
4. Jürjens, J., Secure Systems Development with UML. 2004. Springer.
5. Lang, U. and Schreiner, R. SOA Security Concerns Study. UK Cyber Security Knowledge Transfer Network. 2008. www.secure-soa.org
6. Lang, U. and Schreiner, R. Model driven compliance, accreditation, and monitoring. PCT Patent Application No. PCT/US09/46964, 2008
7. Lang, U. Model Driven Security Blog. 2009. www.modeldrivensecurity.org
8. Lang, Ulrich and Schreiner, Rudolf: Integrated IT Security: Air-Traffic Management Case Study. ISSE 2005 Conference Budapest, Springer, 2005
9. McCuaig, B. Enterprise Risk Management Assessment Guide, Thomson Reuters, 2009.
10. MICO Team. MICO CORBA website. 2009. www.mico.org
11. ObjectSecurity. ObjectWall information webpage. 2009. www.objectwall.com
12. ObjectSecurity. OpenPMF information webpage. 2009. www.openpmf.com
13. ObjectSecurity. SimulateWorld information webpage. 2009. www.simulateworld.com
14. Qedo Team. Qedo CCM website. 2009. www.qedo.org
15. Saeki, M. and Kaiya, H. Using Common Criteria as Reusable Knowledge in Security Requirements Elicitation. 2008. Proceedings of MODSEC2008. http://www.comp.lancs.ac.uk/modsec/papers/modsec08-submission-9.pdf
16. Schreiner, R, Lang, U, Ritter, T, Reznik, J, Building Secure and Interoperable ATC Systems, Eurocontrol INO Workshop 2006
17. UK Ministry of Defence. The MOD Architecture Framework Version 1.2. 2008. www.modaf.com
18. US Department of Defense. Department of Defense Architecture Framework (DoDAF). 2007. www.architectureframework.com/dodaf
19. Wagner, R. et al. (Gartner, Inc.). Cool Vendors in Application Security and Authentication, 2008" (G00156005). 2008. www.gartner.com
20. Watson, A., and al. Object Management Group Overview and guide to OMG's architecture, 2003. www.omg.org/mda, document omg/03-06-01 (MDA Guide V1.0.1)