A pattern based approach for secure database design

Lecture Notes in Business Information Processing

Volumn 83 LNBIP, Issue , 2011, Pages 637-651

  Abramov, Jenny ^a   Sturm, Arnon ^a   Shoval, Peretz ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

authorization; database design; Secure software engineering

Indexed keywords

DATABASE SYSTEMS; INFORMATION SYSTEMS; SECURITY SYSTEMS; SOFTWARE ENGINEERING; SYSTEMS ANALYSIS; SYSTEMS ENGINEERING; TECHNICAL PRESENTATIONS;

APPLICATION DEVELOPMENT; AUTHORIZATION; AUTOMATICALLY GENERATED; DATABASE DESIGN; DATABASE PROTECTION; DATABASE SCHEMAS; DEVELOPMENT PROCESS; NON-FUNCTIONAL REQUIREMENTS; ORGANIZATIONAL POLICIES; SECURE DATABASE; SECURE SOFTWARE ENGINEERING; SECURITY PATTERNS; SECURITY POLICY; SECURITY REQUIREMENTS; SOURCE CODES; SYSTEM REQUIREMENTS;

DESIGN;

EID: 79960333132     PISSN: 18651348     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-22056-2_65     Document Type: Conference Paper

References (24)

1. Basin, D., Clavel, M., Doser, J., Egea, M.: Automated Analysis of Security-Design Models. Information and Software Technology 51(5), 815-831 (2009)
2. Basin, D., Doser, J., Lodderstedt, T.: Model Driven Security: From UML Models to Access Control Infrastructures. ACM Transactions on Software Engineering and Methodology 15(1), 39-91 (2006)
3. Blaha, M., Premerlani, W., Shen, H.: Converting OO Models into RDBMS Schema. IEEE Software 11, 28-39 (1994)
4. Czuprynski, J.: Oracle Label Security. The Database Journal (2003), http://www.databasejournal.com
5. Dhillon, G.: Information Security Management: Global Challenges in the New Millennium. IGI Publishing, Hershey (2001)
6. Fernandez, E.B., Larrondo-Petrie, M.M., Sorgente, T., VanHilst, M.: A Methodology to Develop Secure Systems Using Patterns. In: Integrating Security and Software Engineering: Advances and Future Vision, ch. 5, pp. 107-126. IDEA Press (2006)
7. Fernández-Medina, E., Piattini, M.: Designing Secure Databases. Information and Software Technology 47(7), 463-477 (2005)
8. Gamma, E., Helm, R., Johnson, R., Vlissides, J.M.: Design Patterns: Elements of Reusable Object-Oriented Software. Addison-Wesley, Boston (1994)
9. Heidenreich, F., Wende, C., Demuth, B.: A Framework for Generating Query Language Code from OCL Invariants. In: Akehurst, D.H., Gogolla, M., Zschaler, S. (eds.) Proceedings of the 7th OCL Workshop at the UML/MoDELS Conference, Ocl4All - Modelling Systems with OCL. ECEASST, vol. 9 (2008)
10. Jouault, F., Allilaire, F., Bézivin, J., Kurtev, I.: ATL: A Model Transformation Tool. Science of Computer Programming 72(1-2), 31-39 (2008)
11. Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2004)
12. Koch, M., Parisi-Presicce, F.: UML Specification of Access Control Policies and their Formal Verification. Software and System Modeling 5(4), 429-447 (2006)
13. Lodderstedt, T., Basin, D.A., Doser, J.: SecureUML: A UML-Based Modeling Language for Model-Driven Security. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 426-441. Springer, Heidelberg (2002)
14. Mouratidis, H., Giorgini, P.: Secure Tropos: A Security-Oriented Extension of the Tropos Methodology. International Journal of Software Engineering and Knowledge Engineering 27(2), 285-309 (2007)
15. Mouratidis, H., Jurjens, J.: From Goal Driven Security Requirements Engineering to Secure Design. International Journal of Intelligent Systems 25(8), 813-840 (2010)
16. Object Constraint Language. OMG Specification, Version 2.2, http://www.omg.org/spec/OCL/2.2/
17. Pavlich-Mariscal, J.A., Demurjian, S.A., Michel, L.D.: A Framework of Composable Access Control Features: Preserving Separation of Access Control Concerns from Models to Code. Computers & Security 29(3), 350-379 (2010)
18. Ray, I., France, R.B., Li, N., Georg, G.: An Aspect-Based Approach to Modeling Access Control Concerns. Information and Software Technology 46(9), 575-587 (2004)
19. Reinhartz-Berger, I., Sturm, A.: Utilizing Domain Models for Application Design and Validation. Information & Software Technology 51(8), 1275-1289 (2009)
20. Schumacher, M.: Security Engineering with Patterns: Origins, Theoretical Models, and New Applications. Springer-Verlag New York, Inc., Secaucus (2003)
21. Schumacher, M., Fernandez, E.B., Hybertson, D., Buschmann, F., Sommerlad, P.: Security Patterns: Integrating Security and Systems Engineering. John Wiley & Sons, Chichester (2006)
22. Selic, B.: The Pragmatics of Model-Driven Development. IEEE Software 20(5), 19-25 (2003)
23. Shoval, P.: Functional and Object-Oriented Analysis and Design - An Integrated Methodology. IGI Publishing, Hershey (2007)
24. String Template (2010), http://www.stringtemplate.org