Security-driven model-based dynamic adaptation

ASE'10 - Proceedings of the IEEE/ACM International Conference on Automated Software Engineering

Volumn , Issue , 2010, Pages 205-214

  Morin, Brice ^a   Mouelhi, Tejeddine ^b   Fleurey, Franck ^c   Le Traon, Yves ^d   Barais, Olivier ^e   Jézéquel, Jean Marc ^e  

^a INRIA   (France)

^b ECOLE DES MINES DE NANTES   (France)

^c SINTEF ICT   (Norway)

^d UNIVERSITY OF LUXEMBOURG   (Luxembourg)

^e UNIVERSITÉ DE RENNES 1   (France)

Author keywords

Access control; Adaptive system; Model driven engineering; Models@Runtime

Indexed keywords

ACCESS CONTROL POLICIES; APPLICATION CODES; ARCHITECTURAL MODELS; BUSINESS LOGIC; DYNAMIC ADAPTATIONS; LIBRARY MANAGEMENT SYSTEMS; MODEL-BASED; MODEL-DRIVEN ENGINEERING; PROOF OF CONCEPT; RUNNING SYSTEMS; RUNTIMES; SECURITY EXPERTS; SOFTWARE EVOLUTION;

ADAPTIVE CONTROL SYSTEMS; MODELS; SECURITY SYSTEMS; SOFTWARE ENGINEERING;

ACCESS CONTROL;

EID: 78649790488     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1858996.1859040     Document Type: Conference Paper

References (21)

1. Steve Barker and Maribel Fernández. Term rewriting for access control. In DBSec, pages 179-193, 2006.
2. Steve Barker and Peter J. Stuckey. Flexible access control policy specification with constraint logic programming. ACM Trans. Inf. Syst. Secur., 6(4):501-546, 2003.
3. Elisa Bertino, Sushil Jajodia, and Pierangela Samarati. A flexible authorization mechanism for relational data management systems. ACM Trans. Inf. Syst., 17(2):101-140, 1999.
4. Clara Bertolissi, Maribel Fernández, and Steve Barker. Dynamic event-based access control as term rewriting. In DBSec, pages 195-210, 2007.
5. W. Cazzola, A. Savigni, A. Sosio, and F. Tisato. Architectural reflection : Bridging the gap between a running system and its architectural specification. In REF'98: 6th Reengineering Forum, pages 8-11. IEEE, 1998.
6. Thuong Doan, Steven Demurjian, T. C. Ting, and Andreas Ketterl. Mac and uml for secure software design. In FMSE'04: Proceedings of the 2004 ACM workshop on Formal methods in security engineering, pages 75-85, New York, NY, USA, 2004. ACM.
7. D. F. Ferraiolo, R. Sandhu, S. Gavrila, D. R. Kuhn, and R. Chandramouli. Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security, 4(3):224U?274, 2001.
8. F. Fleurey, V. Dehlen, N. Bencomo, B. Morin, and J-M. Jézéquel. Modeling and Validating Dynamic Adaptation. In 3rd International Workshop on Models@Runtime, at MODELS'08, Toulouse, France, oct 2008.
9. Sushil Jajodia, Pierangela Samarati, Maria Luisa Sapino, and V. S. Subrahmanian. Flexible support for multiple access control policies. ACM Trans. Database Syst., 26(2):214-260, 2001.
10. J. Jürjens. UMLsec: Extending UML for Secure Systems Development. In UML'02: 5th International Conference on The UML, pages 412-425, Dresden, Germany, 2002. Springer-Verlag.
11. A. Abou El Kalam, R. El Baida, P. Balbiani, S. Benferhat, F. Cuppens, Y. Deswarte, A. Miège, C. Saurel, and G. Trouessin. Organization Based Access Control, 2003.
12. G. Kiczales, E. Hilsdale, J. Hugunin, M. Kersten, J. Palm, and W.G. Griswold. An Overview of AspectJ. In ECOOP'01: 15th European Conference on Object-Oriented Programming, pages 327-353, London, UK, 2001. Springer-Verlag.
13. Dae-Kyoo Kim, Indrakshi Ray, Robert B. France, and Na Li. Modeling role-based access control using parameterized uml models. In FASE, pages 180-193, 2004.
14. T. Lodderstedt, D. Basin, and J. Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. In UML'02: 5th International Conference on The UML, pages 426-441, Dresden, Germany, 2002. Springer-Verlag.
15. B. Morin, O. Barais, G. Nain, and J.M. Jézéquel. Taming Dynamically Adaptive Systems with Models and Aspects. In ICSE'09: 31st International Conference on Software Engineering, Vancouver, Canada, May 2009.
16. B. Morin, F. Fleurey, N. Bencomo, J-M. Jézéquel, A. Solberg, V. Dehlen, and G. Blair. An Aspect-Oriented and Model-Driven Approach for Managing Dynamic Variability. In MoDELS'08: ACM/IEEE 11th International Conference on Model Driven Engineering Languages and Systems, Toulouse, France, October 2008.
17. Brice Morin, Olivier Barais, Jean-Marc Jézéquel, Franck Fleurey, and Arnor Solberg. Models@ run.time to support dynamic adaptation. Computer, 42(10):44-51, 2009.
18. T. Mouelhi, F. Fleurey, B. Baudry, and Y. Le Traon. A Model-Based Framework for Security Policies Specification, Deployment and Testing. In MoDELS'08: ACM/IEEE 11th International Conference on Model Driven Engineering Languages and Systems, Toulouse, France, 2008.
19. P.A. Muller, F. Fleurey, and J. M. Jézéquel. Weaving Executability into Object-Oriented Meta-languages. In MoDELS'05: 8th Int. Conf. on Model Driven Engineering Languages and Systems, Montego Bay, Jamaica, Oct 2005. Springer.
20. G. Nain, E. Daubert, O. Barais, and J-M. Jézéquel. Using MDE to Build a Schizofrenic Middleware for Home/Building Automation. In ServiceWave'08: Networked European Software & Services Initiative Conference, Madrid, Spain, December 2008.
21. The OSGi Alliance. OSGi Service Platform Core Specification, Release 4.1, May 2007. http://www.osgi.org/Specifications/.