A domain-specific language for modelling security objectives in a business process models of SOA applications

Advances in Information Sciences and Service Sciences

Volumn 4, Issue 1, 2012, Pages 353-362

  Saleem, Muhammad Qaiser ^a   Jaafar, Jafreezal B ^a   Hassan, Mohd Fadzil ^a  

^a DEPARTMENT OF CHEMICAL ENGINEERING   (Malaysia)

Author keywords

Business process modelling; Domain specific language; Model driven security; Security goals; Service oriented architecture

Indexed keywords

BUSINESS PROCESS MODELLING; DOMAIN SPECIFIC LANGUAGES; MODEL DRIVEN SECURITY; SECURITY GOALS; SERVICE ORIENTED;

INFORMATION ANALYSIS; INFORMATION SERVICES; INFORMATION SYSTEMS; PROBLEM ORIENTED LANGUAGES; SERVICE ORIENTED ARCHITECTURE (SOA);

MATHEMATICAL MODELS;

EID: 84856582306     PISSN: 19763700     EISSN: 22339345     Source Type: Journal    
DOI: 10.4156/AISS.vol4.issue1.45     Document Type: Article

References (29)

1. Michael Menzel, Ivonne Thomas, Christoph Meinel, Security Requirements Specification in Service-Oriented Business Process Management, in International Conference on Availability, Reliability and Security, ARES '09., 2009, pp. 41-48.
2. Qusay F. Hassan, Aspects of SOA: An Entry Point for Starters, Annals. Computer Science Series, Mirton Publishing House, Timisoara, Vol VII, Phase 2, 2009.
3. Chung C. Chang, Kou-Chan Hsiao,A SOA-Based e-Learning System for Teaching Fundamental Information Management Courses, JCIT, Vol. 6, No. 4, pp. 298-305, 2011.
4. Rodríguez Alfonso, Fernández-Medina Eduardo, Piattini Mario, A BPMN Extension for the Modeling of Security Requirements in Business Processes, IEICE - Trans. Inf. Syst., vol. E90-D, pp. 745-752, 2007.
5. David Basin, Jurgen Doser, Torsten Lodderstedt, Model driven security: From UML models to access control infrastructures, ACM Trans. Softw. Eng. Methodol., vol. 15, pp. 39-91, 2006.
6. Yuichi Nakamura, Michiaki Tatsubori, Takeshi Imamura, and Koichi Ono, Model-driven security based on a Web services security architecture, in IEEE International Conference on Services Computing, 2005, 2005, pp. 7-15 vol.1.
7. Fumiko Satoh, Yuichi Nakamura, Nirmal K. Mukhi, Michiaki Tatsubori, Kouichi Ono, Methodology and Tools for End-to-End SOA Security Configurations, in IEEE Congress on Services - Part I, 2008., 2008, pp. 307-314.
8. Christian Wolter, Michael Menzel, Christoph Meinel, Andreas Schaad, Philip Miseldine, Model driven business process security requirement specification, J. Syst. Archit., vol. 55, pp. 211-223, 2009.
9. Muhammad Alam, "Model Driven Security Engineering for the Realization of Dynamic Security Requirements in Collaborative Systems," in Models in Software Engineering, ed, 2007, pp. 278-287.
10. Rodríguez Alfonso, Fernández-Medina Eduardo, Piattini Mario, Towards a UML 2.0 Extension for the Modeling of Security Requirements in Business Processes," in Trust and Privacy in Digital Business, ed, 2006, pp. 51-61.
11. Christian Wolter, Michael Menzel, Christoph Meinel, Modelling Security Goals in Business Processes, Proc. GI Modellierung 2008, GI LNI 127, Berlin, Germany, vol. pp. 197-212, March 2008.
12. Yih-Jiun Lee, Yuh-Chang Wei, Kai-Wen Lien, Making the Internet Search as a Smarter Service: based on Taiwanese Searching Preferences, AISS, Vol. 3, No. 3, pp. 147-153, 2011.
13. Michael Menzel, Christoph Meinel, "A Security Meta-model for Service-Oriented Architectures, in IEEE International Conference on Services Computing, SCC '09'., 2009, pp. 251-259.
14. Jürjens, Jan, UMLsec: Extending UML for Secure Systems Development Tutorial, presented at the Proceedings of the 5th International Conference on The Unified Modeling Language, 2002.
15. Torsten Lodderstedt, David A. Basin, Jürgen Doser, SecureUML: A UML-Based Modeling Language for Model-Driven Security, presented at the Proceedings of the 5th International Conference on The Unified Modeling Language, 2002.
16. Michal Hafner, Ruth Breu, Berthold Agreiter, SECTET: an extensible framework for the realization of secure inter-organizational workflows, Emeral, Internet Research, vol. Vol.16 No. 5, Pag: 491-506, 2006.
17. Mukhtiar Memom, Michael Hafner, Ruth Breu, SECTISSIMO: A Platform-independent Framework for Security Services, MODSEC08 Modeling Security Workshop, 2008.
18. Saleem, Muhammad. Qaiser., JAfreezal. Jaafar, M. Fadzil Hassan., "Model Driven Security Frameworks for Addressing Security Problems of Service Oriented Architecture," IEEE Conference, International Symposium in Information Technology ITSim 2010, 2010.
19. Saleem, Muhammad. Qaiser., Jafreezal. Jaafar, M. Fadzil Hassan., Model Driven Security Framework for Definition of Security Requirements for SOA systems," IEEE International Conference on Computer Applications and Industrial Electronics (ICCAIE 2010), Kuala Lumpure, Malaysia., 2010.
20. Achim D. Brucker, Jurgen Doser, Metamodel-based UML Notations for Domain-specific Languages," 4th International Workshop on Language Engineering (atem 2007), pp. 1-{??}, 2007.
21. David Basin, Jurgen Doser, Torsten Lodderstedt, Model driven security: From UML models to access control infrastructures, ACM Trans. Softw. Eng. Methodol., vol. 15, pp. 39-91, 2006.
22. Jürjens, Jan "UMLsec: Extending UML for Secure Systems Development," in «UML» 2002 - The Unified Modeling Language, Springer-Verlag Berlin Heidelberg ed, 2002, pp. 1-9.
23. Ruth Breu, Michal Hafner, Security Engineering for Service-Oriented Architectures, Springer Verlag Berlin Heidelberg, 2009.
24. Simon Johnston, Modeling security concerns in service-oriented architectures, IBM developerWorks, 2004.
25. Luján-Mora, Sergio, Trujillo, Juan, Song, Il-Yeol, Extending the UML for Multidimensional Modeling," in UML 2002, LNCS 2460, pp. 290-304, 2002, ed: Springer-Verlag Berlin Heidelberg 2002, 2002, pp. 265-276.
26. Stefanov, Veronika List, Beate Korherr, Birgit, "Extending UML 2 Activity Diagrams with Business Intelligence Objects," in Data Warehousing and Knowledge Discovery, ed, 2005, pp. 53-63.
27. Passerone, R. Damm, W. Ben Hafaiedh, I. Graf, S. Ferrari, A. Mangeruca, L. Benveniste, A. Josko, B. Peikenkamp, T. Cancila, D. Cuccuru, A. Gerard, S. Terrier, F. Sangiovanni-Vincentelli Metamodels in Europe: Languages, Tools, and Applications," Copublished by the IEEE CS and the IEEE CASS, vol. 26, pp. 38-53, 2009.
28. Michael Menzel, Christoph Meinel, "SecureSOA Modelling Security Requirements for Service Oriented Architectures," in Services Computing (SCC), 2010 IEEE International Conference on, 2010, pp. 146-153.
29. The OMG., Meta Object Facility (MOF) 2.0 Core Specification, OMG Available Specification, 2005.