Model-driven development of secure service applications

Proceedings of the 2012 IEEE 35th Software Engineering Workshop, SEW 2012

Volumn , Issue , 2012, Pages 62-71

  Borek, Marian ^a   Moebius, Nina ^a   Stenzel, Kurt ^a   Reif, Wolfgang ^a  

^a UNIVERSITY OF AUGSBURG   (Germany)

Author keywords

Code generation; Model driven development; Security; Security critical systems; UML; Web service

Indexed keywords

CODE GENERATION; MODEL DRIVEN DEVELOPMENT; SECURITY; SECURITY-CRITICAL; UML;

INFORMATION SERVICES; SERVICE ORIENTED ARCHITECTURE (SOA); SOFTWARE ENGINEERING; TECHNICAL PRESENTATIONS; WEB SERVICES; WEBSITES;

NETWORK SECURITY;

EID: 84876120891     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SEW.2012.13     Document Type: Conference Paper

References (23)

1. M. Alam, R. Breu, and M. Breu. Model driven security for web services (mds4ws). In Multitopic Conference, 2004. Proceedings of INMIC 2004. 8th International, pages 498-505. IEEE, 2004.
2. K. Baina, B. Benatallah, F. Casati, and F. Toumani. Model-driven web service development. In Advanced Information Systems Engineering, pages 527-543. Springer, 2004.
3. M. Balser, W. Reif, G. Schellhorn, K. Stenzel, and A. Thums. Formal system development with KIV. In Fundamental Approaches to Software Engineering. Springer LNCS 1783, 2000.
4. D. Basin, J. Doser, and T. Lodderstedt. Model Driven Security: From UML Models to Access Control Infrastructures. ACM Transactions on Software Engineering and Methodology, pages 39-91, 2006.
5. E. Börger and R. F. Stärk. Abstract State Machines-A Method for High-Level System Design and Analysis. Springer-Verlag, 2003.
6. M. Deubler, J. Grünbauer, J. Jürjens, and G. Wimmel. Sound development of secure service-based systems. In Proceedings of the 2nd International Conference on Service Oriented Computing, pages 115-124. ACM, 2004.
7. T. Dierks and E. Rescorla. The Transport Layer Security (TLS) Protocol Version 1.2. IETF Network Working Group, August 2008. URL: http://www.ietf.org/ rfc/rfc5246.txt.
8. D. Dolev and A. C. Yao. On the Security of Public Key Protocols. In Proc. 22th IEEE Symposium on Foundations of Computer Science. IEEE, 1981.
9. R. Gronmo, D. Skogan, I. Solheim, and J. Oldevik. Model-driven web services development. In e-Technology, e-Commerce and e-Service, 2004. EEE'04. 2004 IEEE International Conference on, pages 42-45. IEEE, 2004.
10. O. M. Group. Meta Object Facility (MOF) 2.0 Query/View/Transformation Specification, Version 1.1, 2011.
11. F. Huber, S. Molterer, A. Rausch, B. Schatz, M. Sihling, and O. Slotosch. Tool supported specification and simulation of distributed systems. In Software Engineering for Parallel and Distributed Systems, 1998. Proceedings. International Symposium on, pages 155-164. IEEE, 1998.
12. Jan Jürjens. Secure Systems Development with UML. Springer, 2005.
13. G. Lowe. Breaking and Fixing the Needham-Schroeder Public-Key Protocol Using FDR. In Tools and Algorithms for Construction and Analysis of Systems, Second International Workshop (TACAS), pages 147-166. Springer LNCS 1055, 1996.
14. P. Mayer, A. Schroeder, and N. Koch. MDD4SOA: Model-Driven Service Orchestration. In Proceedings of 12th IEEE International EDOC Conference (EDOC 2008). IEEE press, 2008.
15. N. Mitra and Y. Lafon. SOAP Version 1.2. W3C, 2007.
16. N. Moebius, K. Stenzel, H. Grandy, and W. Reif. SecureMDD: A Model-Driven Development Method for Secure Smart Card Applications. In Workshop on Secure Software Engineering, SecSE, at ARES 2009. IEEE Press, 2009.
17. N. Moebius, K. Stenzel, and W. Reif. Formal verification of applicationspecific security properties in a model-driven approach. In Proceedings of ESSoS 2010 - International Symposium on Engineering Secure Software and Systems. Springer LNCS 5965, 2010.
18. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, and H. Granqvist. WS-SecurityPolicy 1.2. OASIS, 2006.
19. A. Nadalin, C. Kaler, P. Hallam-Baker, and R. Monzillo. Web Services Security: SOAP Message Security 1.0. OASIS, 2004.
20. Y. Nakamura, M. Tatsubori, T. Imamura, and K. Ono. Model-driven security based on a web services security architecture. In IEEE International Conference on Services Computing, pages 7-15. IEEE Press, 2005.
21. R. M. Roberto Chinnici, Marc Hadley. The Java API for XML-Based Web Services (JAX-WS) 2.0. JCP, 2006.
22. Q. Sheng and B. Benatallah. Contextuml: a uml-based modeling language for model-driven development of context-aware web services. In Mobile Business, 2005. ICMB 2005. International Conference on, pages 206-212. IEEE, 2005.
23. Sun Microsystems Inc. Java Card 2.2 Specification, 2002. http://java.sun.com/products/javacard/.