Tool support for enforcing security policies on databases

Lecture Notes in Business Information Processing

Volumn 107 LNBIP, Issue , 2012, Pages 126-141

  Abramov, Jenny ^a   Anson, Omer ^a   Sturm, Arnon ^a   Shoval, Peretz ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

authorization; database design; Secure software engineering

Indexed keywords

INFORMATION SYSTEMS; SOFTWARE ENGINEERING;

AUTHORIZATION; DATABASE DESIGN; DATABASE PROTECTION; DEVELOPMENT PROCESS; SECURE DATABASE; SECURE SOFTWARE ENGINEERING; SECURITY MODELING; SECURITY POLICY; SECURITY REQUIREMENTS; TOOL SUPPORT;

DATABASE SYSTEMS;

EID: 84861171549     PISSN: 18651348     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-29749-6_9     Document Type: Conference Paper

References (25)

1. Dhillon, G.S.: Information Security Management: Global Challenges in the New Millennium. IGI Publishing (2001)
2. Eclipse Modeling Framework (2011), http://www.eclipse.org/modeling/emf/
3. Jouault, F., Allilaire, F., Bézivin, J., Kurtev, I.: ATL: A model transformation tool. Science of Computer Programming. Science of Computer Programming 72(1-2), 31-39 (2008)
4. Reinhartz-Berger, I., Sturm, A.: Utilizing Domain Models for Application Design and Validation. Information & Software Technology 51(8), 1275-1289 (2009)
5. Schumacher, M.: Security Engineering with Patterns: Origins, Theoretical Models, and New Applications. Springer-Verlag New York, Inc., Secaucus (2003)
6. Shoval, P.: Functional and Object-Oriented Analysis and Design - An Integrated Methodology. IGI Publishing, Hershey (2007)
7. Standard Widget Toolkit (2011), http://www.eclipse.org/swt/
8. StringTemplate (2011), http://www.stringtemplate.org/
9. TOPCASED (2011), http://www.topcased.org/
10. Eclipse (2011), http://www.eclipse.org/
11. Dresden OCL Toolkit (2011), http://www.dresden-ocl.org/index.php/ DresdenOCL
12. ATL (2011), http://eclipse.org/atl/
13. Standard Widget Toolkit (2011), http://www.eclipse.org/swt/
14. Abramov, J., Sturm, A., Shoval, P.: A Pattern Based Approach for Secure Database Design. In: Salinesi, C., Pastor, O. (eds.) CAiSE Workshops 2011. LNBIP, vol. 83, pp. 637-651. Springer, Heidelberg (2011)
15. Basin, D., Doser, J., Lodderstedt, T.: Model driven security: From UML models to access control infrastructures. ACM Transaction on Software Engineering and Methodologies 15(1), 39-91 (2006)
16. Fernandez, E.B., Larrondo-Petrie, M.M., Sorgente, T., VanHilst, M.: A methodology to develop secure systems using patterns. In: Mouratidis, H., Giorgini, P. (eds.) Integrating Security and Software Engineering: Advances and Future Vision. IDEA Press (2006)
17. Lodderstedt, T., Basin, D., Doser, J.: SecureUML: A UML-Based Modeling Language for Model-Driven Security. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 426-441. Springer, Heidelberg (2002)
18. Mouratidis, H., Giorgini, P.: Secure Tropos: a Security-Oriented Extension of the Tropos Methodology. International Journal of Software Engineering and Knowledge Engineering 17, 285-309 (2007)
19. Jurjens, J.: Secure Systems Development with UML. Springer (2005)
20. Gamma, E., Helm, R., Johnson, R., Vlissides, J.: Design patterns: elements of reusable object-oriented software. Addison-Wesley Professional (1995)
21. Hafner, M., Breu, R.: Security Engineering for Service oriented Architectures. Springer (2009)
22. Ray, I., France, R.B., Li, N., Georg, G.: An aspect-based approach to modeling access control concerns. Information & Software Technology 46, 575-587 (2004)
23. Fernández-Medina, E., Piattini, M.: Designing secure databases. Information & Software Technology 47(7), 463-477 (2005)
24. Mouratidis, H., Jurjens, J.: From goal-driven security requirements engineering to secure design. International Journal on Intelligent Systems 25(8), 813-840 (2010)
25. Schumacher, M., Fernandez-Buglioni, E., Hybertson, D., Buschmann, F., Sommerlad, P.: Security Patterns: Integrating Security and Systems Engineering. John Wiley & Sons (2006)