Development of secure XML Data warehouses with QVT

Information and Software Technology

Volumn 55, Issue 9, 2013, Pages 1651-1677

  Vela, B ^a   Mazon J N ^b   Blanco, C ^c   Fernandez Medina E ^d   Trujillo, J ^b   Marcos, E ^a  

^a UNIVERSIDAD REY JUAN CARLOS   (Spain)

^b UNIVERSITY OF ALICANTE   (Spain)

^c UNIVERSITY OF CANTABRIA   (Spain)

^d UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

Author keywords

Data warehouse; MDA; QVT; Security; XML

Indexed keywords

DECISION MAKING; METADATA; SOFTWARE ARCHITECTURE; XML;

BUSINESS INFORMATION; DECISION MAKING PROCESS; HETEROGENEOUS DATA SOURCES; HETEROGENEOUS SOURCES; MODEL DRIVEN DEVELOPMENT; MULTI-DIMENSIONAL MODEL; SECURITY; TRANSFORMATION RULES;

DATA WAREHOUSES;

EID: 84893644274     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2013.03.003     Document Type: Article

References (69)

1. W. H. Inmon, 2.0 - Architecture for the next generation of data warehousing, Morgan Kaufman, 2008.
2. W. H. Inmon, Building the Data Warehouse, Wiley, 2005.
3. R. Kimball, L. Reeves, M. Ross, W. Thornthwaite, The Data Warehousing Lifecycle Toolkit, John Wiley & Sons, New York, USA, 2008.
4. F. Ravat, O. Teste, R. Tournier, G. Zurfluh, Finding an application-appropriate model for XML data warehouses, Information Systems 35 (2010) 662-687.
5. J. M. Pérez, R. B. Llavori, M. J. Aramburu, T. B. Pedersen, Integrating data warehouses with web data: a survey, IEEE Transaction Knowledge Data Engineering 20 (2008) 940-955.
6. H. Mahboubi, M. Hachicha, J. Darmont, XML warehousing and OLAP, in: Encyclopedia of Data Warehousing and Mining, second ed., IGI Publishing, 2008, pp. 2109-2116.
7. O. Boussaid, R. B. Messaoud, R. Choquet, S. Anthoard, X-warehousing: an XML-based approach for warehousing complex data, in: 10th East-European Conference on Advances in Databases and Information Systems (ADBIS), Springer Verlag, ThessalonikiGreece, 2006, pp. 39-54.
8. M. Golfarelli, S. Rizzi, B. Vrdoljak, Data Warehouse Design from XML Source, in: DOLAP 2001, 2001.
9. B. Thuraisingham, M. Kantarcioglu, S. Iyer, Extended RBAC-based design and implementation for a secure data warehouse, International Journal of Business Intelligence and Data Mining (IJBIDM) 2 (2007) 367-382.
10. A. Abelló, J. Samos, F. Saltor, A framework for the classification and description of multidimensional data models, in: 12th International Conference on Database and Expert Systems Applications (DEXA'01), Springer-Verlag, Munich, Germany, 2001, pp. 668-677.
11. O. Romero, A. Abelló, A survey of multidimensional modeling methodologies, International Journal of Data Warehousing and Mining (IJDWM) 5 (2009) 1-23.
12. H. Mouratidis, Software Engineering for Secure Systems: Industrial and Research Perspectives, IGI Global, 2011.
13. J. Jürjens, Secure Systems Development with UML, Springer-Verlag, 2004.
14. E. Fernández-Medina, J. Jürjens, J. Trujillo, S. Jajodia, Model-driven development for secure information systems, Information and Software Technology 51 (2009) 809-814.
15. B. Husemann, J. Lechtenborger, G. Vossen, Conceptual data warehouse design, in: Proceedings of the 2nd. International Workshop on Design and Management of Data Warehouses (DMDW'2000), Technical University of Aachen (RWTH), Stockholm, Sweden, 2000, pp. 3-9.
16. J. Jürjens, H. Schmidt, UMLsec4UML2-Adopting UMLsec to support UML2, in: Technical Reports in Computer Science. Technische Universitat Dortmund, 2011. .
17. H. Mouratidis, P. Giorgini, Integrating Security and Software Engineering: Advances and Future Vision, IGI Global, 2006.
18. OMG, Model Driven Architecture Guide Version 1.0.1, 2003.
19. J. N. Mazón, J. Trujillo, A hybrid model driven development framework for the multidimensional modeling of data warehouses, SIGMOD Record 38 (2009) 12-17.
20. J.-N. Mazón, J. Trujillo, An MDA approach for the development of data warehouses, Decision Support Systems 45 (2008) 41-58.
21. J. Trujillo, E. Soler, E. Fernández-Medina, M. Piattini, A UML 2.0 profile to define security requirements for data warehouses, Computer Standard and Interfaces 31 (2009) 969-983.
22. J. Trujillo, E. Soler, E. Fernández-Medina, M. Piattini, An engineering process for developing secure data warehouses, Information and Software Technology 51 (2009).
23. E. Soler, J. Trujillo, E. Fernández-Medina, M. Piattini, Building a secure star schema in data warehouses by an extension of the relational package from CWM, Computer Standard and Interfaces 30 (2008) 341-350.
24. E. Fernandez-Medina, J. Trujillo, R. Villarroel, M. Piattini, Developing secure data warehouses with a UML extension, Information Systems 32 (2007) 826-856.
25. B. Vela, C. Blanco, E. Fernández-Medina, E. Marcos, A practical application of our MDD approach for modeling secure XML data warehouses, Decision Support Systems 52 (2012) 26.
26. OMG, QVT. Meta Object Facility (MOF) 2.0 Query/View/Transformation Specification, OMG, 2008.
27. A. Kleppe, J. Warmer, W. Bast, MDA Explained: The Model Driven Architecture: Practice and Promise, Addison-Wesley, 2003.
28. A. Gerber, M. Lawley, K. Raymond, J. Steel, A. Wood, Transformation: the missing link of MDA, in: H. E. A. Corradini, H.-J. Kreowski, G. Rozenberg (Eds.), ICGT 2002, Springer-Verlag, 2002, pp. 90-105.
29. K. Czarnecki, S. Helsen, Classification of model transformation approaches, in: 2nd OOPSLA Workshop on Generative Techniques in the Context of the Model Driven Architecture, Anaheim, 2003.
30. S. Sendall, W. Kozaczynski, Model transformation: the heart and soul of model-driven software development, IEEE Software 20 (2003) 42-45.
31. OMG, OCL 2.0 Specification. Version 2.0, in: Object Management Group (OMG), 2005, pp. 185.
32. SmartQVT, An Open Source Model Transformation Tool Implementing the MOF 2.0 QVT-Operational Language. .
33. mediniQVT, mediniQVT. .
34. A. Group, ATLAS Transformation Language. .
35. J. N. Mazón, J. Trujillo, A model-driven goal-oriented requirement engineering approach for data warehouses, in: Advances in Conceptual Modeling - Foundations and Applications, ER 2007 Workshops CMLSA, FP-UML, ONISW, QoIS, RIGiM, SeCoGIS, Auckland, New Zealand, 2007, pp. 255-264.
36. J. N. Mazón, J. Trujillo, J. Lechtenborger, Reconciling requirement-driven data warehouses with data sources via multidimensional normal forms, Data & Knowledge Engineering 63 (2007) 725-751.
37. W3C, XML Schema Working Group, XML Schema Parts 0-2: Primer, Structures, Datatypes, 2004. .
38. E. Fernández-Medina, J. Trujillo, R. Villarroel, M. Piattini, Developing secure data warehouses with a UML extension, Information Systems 32 (2007) 826-856.
39. E. Fernandez-Medina, J. Trujillo, R. Villarroel, M. Piattini, Access control and audit model for the multidimensional modeling of data warehouses, Decision Support Systems 42 (2006) 1270-1289.
40. B. Vela, C. J. Acuña, E. Marcos, A model driven approach for XML database development, in: International Conference on Conceptual Modeling, Shanghai, China, 2004, pp. 780-794.
41. * in the development of a data warehouse for a university: the UNIVFRONTERA1-09I project, in: C. U. London (Ed.), iStar Showcase'11, London, 2011.
42. D. Pedersen, J. Pedersen, T. B. Pedersen, Integrating XML data in the TARGITOLAP system, in: Int. Conference on Data Engineering (ICDE), IEEE Computer Society, 2004, pp. 778-781.
43. Y. Li, A. An, Representing UML snowflake diagram from integrating XML data using XML schema, in: Int. Workshop on Data Engineering Issues in E-Commerce (DEEC), IEEE Computer Society, 2005, pp. 103-111.
44. V. Nassis, T. S. Dillon, R. Rajagopalapillai, J. W. Rahayu, An XML document warehouse model, in: Int. Conf. on Database Systems for Advanced Applications (DASFAA), Springer, 2006, pp. 513-529.
45. K. S. Beyer, D. D. Chamberling, L. S. Colby, F. Ozcan, H. Pirahesh, Y. Xu, Extending XQuery for analytics, in: ACM SIGMOD Infernational Conference on Management of Data, Baltimore, Maryland, 2005, pp. 503-514.
46. N. Wiwatwattana, H. V. Jagadish, LV. S. Lakshmanan, D. Srivastava, X∧3: a cube operator for XML OLAP, in: International Conference on Data Engineering (ICDE), Istanbul, Turkey, 2007, pp. 916-925.
47. O. Boussaid, R. B. Messaoud, R. Choquet, S. Anthoard, X-warehousing: an XML-based approach for warehousing complex data, in: East European Conf. on Advances in Databases and Information Systems (ADBIS), Springer, 2006, pp. 39-54.
48. B.-K. Park, H. Han, I.-Y. Song, XML-OLAP: a multidimensional analysis framework for XML warehouses, Data Warehousing and Knowledge Discovery, LNCS 3589 (2005) 32-42.
49. D. Basin, J. Doser, T. Lodderstedt, Model driven security: from UML models to access control infrastructures, ACM Transactions on Software Engineering and Methodology 15 (2006) 39-91.
50. S. H. Houmb, S. Islam, E. Knauss, J. Jürjens, K. Schneider, Eliciting security requirements and tracing them to design: an integration of Common Criteria, Heuristics, and UMLsec Requirements Engineering 15 (2010) 30.
51. J. Jürjens, P. Shabalin, Tools for secure systems development with UML, International Journal on Software Tools for Technology Transfer (STTT) Archive 9 (2007) 18.
52. R. Matulevicius, M. Dumas, Towards model transformation between SecureUML and UMLsec for role-based access control, in: Proceeding of the 2011 Conference on Databases and Information Systems VI: Selected Papers from the Ninth International Baltic Conference, DB&IS 2010, IOS Press, Amsterdam, The Netherlands, The Netherlands, 2011, pp. 339-352.
53. P. Bresciani, P. Giorgini, F. Giunchiglia, J. Mylopoulos, A. Perini, Tropos: agentoriented software development methodology, Journal of Autonomous Agents and Multi-Agent System 8 (2004) 203-236.
54. P. Giorgini, H. Mouratidis, N. Zannone, Modelling security and trust with secure tropos, in: Integrating Security and Software Engineering: Advance and Future Visions, Idea Group Publishing, 2006.
55. C. Steel, R. Nagappan, R. Lai, The alchemy of security design methodology, patterns, and reality checks, in: Core Security Patterns: Best Practices and Strategies for J2EE, Web Services, and Identity Management, Prentice Hall, 2005, p. 1088.
56. R. P. van de Riet, Twenty-five years of Mokum: for 25 years of data and knowledge engineering: correctness by design in relation to MDE and correct protocols in cyberspace, Data & Knowledge Engineering 67 (2008) 293-329.
57. D. G. Rosado, C. Gutiérrez, E. Fernández-Medina, M. Piattini, Security patterns related to security requirements, in: Workshop on Security in Information Systems (WOSIS'06) in Conjunction with ICEIS'06, INSTICC, Paphos, Cyprus, 2006, pp. 163-173.
58. D. Mellado, E. Fernandez-Medina, M. Piattini, A common criteria based security requirements engineering process for the development of secure information systems, Computer Standards & Interfaces 29 (2007) 244-253.
59. D. Mellado, E. Fernández-Medina, M. Piattini, Towards security requirements management for software product lines: a security domain requirements engineering process, Computer Standard and Interfaces 30 (2008) 361-371.
60. E. Fernandez-Medina, M. Piattini, Designing secure databases, Information and Software Technology 47 (2005) 463-477.
61. A. Rodríguez, E. Fernández-Medina, M. Piattini, A BPMN extension for the modeling of security requirements in business processes, IEICE Transactions on Information and Systems E 90-D (2007) 745-752.
62. A. Rodriguez, E. Fernandez-Medina, M. Piattini, An MDA approach to develop secure business processes through a UML 2.0 extension, Computer Systems, Science and Engineering 22 (2007) 307-319.
63. T. Priebe, G. Pernul, A pragmatic approach to conceptual modeling of OLAP security, in: 20th International Conference on Conceptual Modeling (ER 2001), Springer-Verlag, Yokohama, Japan, 2001.
64. F. R. S. Paim, J. Castro, DWARF: an approach for requirements definition and management of data warehouse systems, in: IEEE International Conference on, Requirements Engineering, 2003, pp. 75-84.
65. N. Katic, G. Quirchmayr, J. Schiefer, M. Stolba, A. Min Tjoa, A prototype model for data warehouse security based on metadata, in: 9th International Workshop on Database and Expert Systems Applications (DEXA'98). IEEE Computer Society, Vienna, Austria, 1998, pp. 300-308.
66. F. Saltor, M. Oliva, A. Abelló, J. Samos, Building secure data warehouse schemas from federated information systems, in: H. Bestougeff, J. E. Dubois, B. Thuraisingham (Eds.), Heterogeneous Inf. Exchange and Organizational Hubs, Kluwer Academic Publisher, Dordrecht, The Netherlands, 2002, pp. 123-134.
67. A. Rosenthal, E. Sciore, View security as the basic for data warehouse security, in: 2nd International Workshop on Design and Management of Data Warehouse (DMDW'00), Sweden, 2000, pp. 8.1-8.8.
68. E. Weippl, O. Mangisengi, W. Essmayr, F. Lichtenberger, W. Winiwarter, An authorization model for data warehouses and OLAP, in: Workshop on Security in Distributed Data Warehousing, New Orleans, Louisiana, USA, 2001.
69. L. Wang, S. Jajodia, D. Wijesekera, Securing OLAP data cubes against privacy breaches, in: IEEE Symposium on Security and Privacy, Berkeley, California, 2004, pp. 161-178.