Model driven security frameworks for addressing security problems of service oriented architecture

Proceedings 2010 International Symposium on Information Technology - System Development and Application and Knowledge Society, ITSim'10

Volumn 3, Issue , 2010, Pages 1341-1346

  Saleem, Muhammad Qaiser ^a   Jaafar, Jafreezal ^a   Hassan, Mohd Fadzil ^a  

^a DEPARTMENT OF CHEMICAL ENGINEERING   (Malaysia)

Author keywords

Model driven architecture; Model driven security; Model driven software development; Service oriented architecture

Indexed keywords

MODEL DRIVEN ARCHITECTURES; MODEL DRIVEN SECURITY; MODEL DRIVEN SOFTWARE DEVELOPMENT; ORGANIZATIONAL LEVELS; RESEARCH GROUPS; SECURE SOFTWARE; SECURITY GOALS; SECURITY PROBLEMS; SECURITY REQUIREMENTS; SECURITY RISKS; TECHNICAL LEVELS; WEB SERVICES TECHNOLOGIES; WORK-FLOWS; WORKING STYLES;

INFORMATION SERVICES; INFORMATION TECHNOLOGY; NETWORK SECURITY; SOFTWARE ARCHITECTURE; SOFTWARE DESIGN; WEB SERVICES;

SERVICE ORIENTED ARCHITECTURE (SOA);

EID: 78049450441     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ITSIM.2010.5561580     Document Type: Conference Paper

References (18)

1. Y. Nakamura, M. Tatsubori, T. Imamura, and K. Ono, "Modeldriven security based on a Web services security architecture," in Services Computing, 2005 IEEE International Conference on, 2005, pp. 7-15 vol.1.
2. C. Wolter, M. Menzel, A. Schaad, P. Miseldine, and C. Meinel, "Model-driven business process security requirement specification," J. Syst. Archit., vol. 55, pp. 211-223, 2009.
3. M. Menzel, I. Thomas, and C. Meinel, "Security Requirements Specification in Service-Oriented Business Process Management," in Availability, Reliability and Security, 2009. ARES '09. International Conference on, 2009, pp. 41-48.
4. F. Satoh, Y. Nakamura, N. K. Mukhi, M. Tatsubori, and K. Ono, "Methodology and Tools for End-to-End SOA Security Configurations," in Services - Part I, 2008. IEEE Congress on, 2008, pp. 307-314.
5. R. B. Michal Hafner, Berthold Agreiter, "SECTET: an extensible framework for the realization of secure inter-organizational workflows," Emeral Internet Research, vol. Vol.16 No. 5, 2006, pp. pp.491-506, 2006.
6. M. H. a. R. B. Mukhtiar Memom, "SECTISSIMO: A Platform-independent Framework for Security Services, ", 2008.
7. J. Jurjens, "UMLsec: Extending UML for Secure Systems Development-Tutorial," in Proceedings of the 5th International Conference on The Unified Modeling Language: Springer-Verlag, 2002.
8. T. Lodderstedt, D. A. Basin, J\, \#252, and r. Doser, "SecureUML: A UML-Based Modeling Language for Model-Driven Security," in Proceedings of the 5th International Conference on The Unified Modeling Language: Springer-Verlag, 2002.
9. S. Hanna and M. Munro, "Fault-Based Web Services Testing," in Information Technology: New Generations, 2008. ITNG 2008. Fifth International Conference on, 2008, pp. 471-476.
10. G. A. Lewis, E. Morris, S. Simanta, and L. Wrage, "Common Misconceptions about Service-Oriented Architecture," in Commercial-off-the-Shelf (COTS)-Based Software Systems, 2007. ICCBSS '07. Sixth International IEEE Conference on, 2007, pp. 123-130. (Pubitemid 47133566)
11. A. D. a. P. Narasimhan, "Dependable Service-Oriented Computing," IEEE Internet Computing, March/April 2009, pp. 11-15, 2009.
12. R. K. Philip Bianco, Paulo Merson, "Evaluation of Service- Oriented Architecture," Software Engineering Institute/Carnegie Mellon, vol. Technical Report, CMU/SEI-2007-TR-015, September 2007, 2007.
13. R. B. Michal Hafner, "Security Engineering for Service-Oriented Architectures," BOOK, 2009 Springer-Verlag Berlin Heidelberg.
14. P. v. O. A. Menezes, and S. Vanstone, "Handbook of Applied Cryptography," CRC Press, 1996.
15. M. Jensen and S. Feja, "A Security Modeling Approach for Web-Service-Based Business Processes," in Engineering of Computer Based Systems, 2009. ECBS 2009. 16th Annual IEEE International Conference and Workshop on the, 2009, pp. 340-347.
16. M. Menzel and C. Meinel, "A Security Meta-model for Service-Oriented Architectures," in Services Computing, 2009. SCC '09. IEEE International Conference on, 2009, pp. 251-259.
17. M. Alam, "Model Driven Security Engineering for the Realization of Dynamic Security Requirements in Collaborative Systems," in Models in Software Engineering, 2007, pp. 278-287.
18. H. Klarl, C. Wolff, and C. Emig, "Identity Management in Business Process Modelling: A Model-Driven Approach," in Konzepte, Technologien, Anwendungen: 9. Internationale Tagung Wirtschaftsinformatik, Wien, 25 -27. Februar 2009. Teil 1, H. R. Hansen, D. Karagiannis, and H.-G. Fill, Eds. Wien: Ãsterreichische Computer Gesellschaft, 2009, pp. 161-170.