A transformation contract to generate aspects from access control policies

Software and Systems Modeling

Volumn 10, Issue 3, 2011, Pages 395-409

  Braga, Christiano ^a  

^a FLUMINENSE FEDERAL UNIVERSITY   (Brazil)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACT SYNTAX; ACCESS CONTROL MODELS; ACCESS CONTROL POLICIES; ASPECT ORIENTED MODELING; ASPECT-ORIENTED; CODE GENERATION; CODE GENERATORS; FUNCTIONAL PARTS; GENERAL MODEL; INDUSTRIAL STANDARDS; INFRA-STRUCTURE; MDA APPROACH; META MODEL; MODEL TRANSFORMATION; MODELING LANGUAGES; NON-FUNCTIONAL CONCERNS; ROLE-BASED ACCESS CONTROL MODEL; SECURITY ISSUES; TIME-SHARING;

ABSTRACTING; ASPECT ORIENTED PROGRAMMING; AUTOMATIC PROGRAMMING; COMPUTER SYSTEMS PROGRAMMING; FUNCTIONAL PROGRAMMING; NETWORK COMPONENTS; NETWORK SECURITY; PROGRAM COMPILERS; SECURITY SYSTEMS; SYNTACTICS; TIME SHARING SYSTEMS;

ACCESS CONTROL;

EID: 79959698716     PISSN: 16191366     EISSN: 16191374     Source Type: Journal    
DOI: 10.1007/s10270-010-0156-x     Document Type: Article

References (28)

1. Basin D., Clavel M., Doser J., Egea M.: Automated analysis of security-design models. Inf. Softw. Technol. 51(5), 815-831 (2009).
2. Basin D. A., Doser J., Lodderstedt T.: Model driven security: from UML models to access control infrastructures. ACM Trans. Softw. Eng. Methodol. 15(1), 39-91 (2006).
3. Bézivin, J., Butner, F., Gogolla, M., Jouault, F., Kurtev, I., Lindow, A.: Model transformations? Transformation models!. In: Nierstrasz, O. (ed.) Proceedings of 9th international conference on model driven engineering languages and system, MoDELS 2006, Genova, Italy, October 1-6, Lecture Notes in Computer Science, vol. 4199, pp. 440-453. Springer, Berlin (2006).
4. Bouhoula A., Jouannaud J.-P., Meseguer J.: Specification and proof in membership equational logic. Theor. Comput. Sci. 236(1-2), 35-132 (2000).
5. Braga, C.: From access control policies to aspect code: a metamodel-based approach. In: Chaudron, M. R. V. (ed.) Proceedings of the 11th international conference on model driven engineering languages and systems (MODELS 2008), workshops and symposia at MODELS 2008, September 28-October 3, 2008, Toulouse, France. Lecture Notes in Computer Science, vol. 5421. Springer, Berlin (2008). (Also appeared in the proceedings of the 1st International Workshop on Non-functional System Properties in Domain Specific Modeling Language NFPinDSML-2008, Toulouse, France, September 28, 2008, Edited by Marko Boskovic, Dragan Gasevic, Claus Pahl and Bernhard Schatz, http://CEUR-WS.org/Vol-394/).
6. Chen, K., Lin, C.-W.: An aspect-oriented approach to declarative access control for web applications. In: Zhou, X., Li, J., Shen, H. T., Kitsuregawa, M., Zhang, Y. (eds.) Proceedings of the 8th Asia-Pacific Web Conference, Harbin, China, January 16-18. Lecture Notes in Computer Science, vol. 3841, pp. 176-188. Springer, Berlin (2006).
7. Clavel, M., da Silva, V., Braga, C., Egea, M.: Model-driven security in practice: an industrial experience. In: Proceedings of ECMDA 2008, fourth European conference on model driven architecture, foundations and applications, Berlin, Germany, June 09-12. Lecture Notes in Computer Science, vol. 5095. Springer, Berlin (2008). doi: 10. 1007/978-3-540-69100-6_22.
8. Clavel M., Durán F., Eker S., Lincoln P., Martí-Oliet N., Meseguer J., Talcott C.: All about Maude-a high-performance logical framework: how to specify, program, and verify systems in rewriting logic. Lecture Notes in Computer Science. Springer, New York (2007).
9. Clavel, M., Durán, F., Eker, S., Lincoln, P., Martí-Oliet, N., Meseguer, J., Talcott, C. L., Braga, C., Farzan, A., Hendrix, J., Ölveczky, P. C., Palomino, M., Sasse, R., Stehr, M.-O., Verdejo, A.: All about Maude: a high-performance logical framework. Lecture Notes in Computer Science, vol. 4350, chap. 21, pp. 667-693. Springer, Berlin (2007). doi: 10. 1007/978-3-540-71999-1_21.
10. Clavel, M., Egea, M.: Equational specification of UML+OCL static class diagrams. http://maude.sip.ucm.es/~clavel/pubs/clavel-egea06a.pdf, (2006).
11. Clavel, M., Egea, M.: ITP/OCL: A rewriting-based validation tool for UML+OCL static class diagrams. In: Proceedings of 11th international conference on algebraic methodology and software technology, AMAST 2006, Kuressaare, Estonia, July 5-8. Lecture Notes in Computer Science, vol. 4019, pp. 368-373. Springer, Berlin (2006).
12. de Win, B., Vanhaute, B., Decker, B. D.: Security through aspect-oriented programming. In: Proceedings of the IFIP TC11 WG 11. 4 first annual conference on netwrok security: advances in network and distributed systems security, vol. 206, pp. 125-138 (2001).
13. Egea, M.: An executable formal semantics for OCL with applications to model analysis and validation. PhD thesis, Universidad Complutense de Madrid (2008).
14. Ferraiolo D. F., Kuhn D. R., Chandramouli R.: Role-based access control, 2nd edn. Artech House Publishers, USA (2007).
15. Gao, S., Deng, Y., Yu, H., He, X., Beznosov, K., Cooper, K.: Applying aspect-orientation in designing security systems: A case study. In: Proceedings of 16th international conference on software engineering and knowledge engineering, Banff, Alberta, Canada, June 20-24, pp. 360-365 (2004).
16. Goguen J. A., Meseguer J.: Order-sorted algebra I: equational deduction for multiple inheritance, overloading, exceptions and partial operations. Theor. Comput. Sci. 105(2), 217-273 (1992).
17. Jürjens, J.: Model-based security engineering with uml: Introducing security aspects. In: de Boer, F. S. (ed.) Proceedings of the 4th international symposium on formal methods for components and objects, Amsterdam, The Netherlands, 1-4 November. Lecture Notes in Computer Science, vol. 4111, pp. 64-87. Springer, Berlin (2005).
18. Jürjens J.: Secure systems development with UML. Springer, Berlin (2005).
19. Jurjens, J., Houmb, S. H.: Dynamic secure aspect modeling with UML: from models to code. In: Briand, L., Williams, C. (eds.) Proceedings of 8th international conference on model driven engineering languages and system, MoDELS 2005, Montego Bay, Jamaica, October 2-7. Lecture Notes in Computer Science, vol. 3713, pp. 142-155. Springer, Berlin (2005).
20. Jürjens, J., Schreck, J., Yu, Y.: Automated analysis of permission-based security using umlsec. In: Fiadeiro, J. L., Inverardi, P. (eds.) Proceedings of the 11th international conference on fundamental approaches to software engineering, FASE 2008, held as part of the joint European conferences on theory and practice of software, ETAPS 2008, Budapest, Hungary, March 29-April 6. Lecture Notes in Computer Science, vol. 4961, pp. 292-295. Springer, Berlin (2008).
21. Kiczales, G., Hilsdale, E., Hugunin, J., Kersten, M., Palm, J., Griswold, W. G.: An overview of AspectJ. In: Proceedings of the 5th European conference, Budapest, Hungary, June 18-22. Lecture Notes in Computer Science, vol. 2072, pp. 327-355 (2001).
22. Küster J. M.: Definition and validation of model transformations. Softw. Syst. Model. 5(3), 1319-1366 (2006).
23. Lamari, M.: Towards an automated test generation for the verification of model transformations. In: SAC '07: Proceedings of the 2007 ACM symposium on applied computing, pp. 998-1005. ACM, New York (2007).
24. Meyer B.: Object-oriented software construction, 2nd edn. Prentice Hall, New York (1997).
25. Miller, J., Mukerji, J. (eds.): MDA Guide (Version 1. 0. 1). Number omg/2003-06-01. OMG (2006).
26. Object Management Group: MOF QVT final adopted specification, OMG Adopted Specification ptc/05-11-01 (2005).
27. Pavlich-Mariscal, J., Michel, L., Demurjian S.: A formal enforcement framework for role-based access control using aspect-oriented programming. In: Briand, L., Williams, C. (eds.) Proceedings of 8th international conference on model driven engineering languages and system, MoDELS 2005, Montego Bay, Jamaica, October 2-7. Lecture Notes in Computer Science, vol. 3713, pp. 537-552. Springer, Berlin (2005).
28. Ray I., France R., Li N., Georg G.: An aspect-based approach to modeling access control concerns. Inf. Softw. Technol. 46(9), 575-587 (2004).