Showing the benefits of applying a model driven architecture for developing secure OLAP applications

Journal of Universal Computer Science

Volumn 20, Issue 2, 2014, Pages 79-106

  Blanco, Carlos ^a   de Guzmán, Ignacio García Rodríguez ^b   Fernández Medina, Eduardo ^b   Trujillo, Juan ^c  

^a UNIVERSITY OF CANTABRIA   (Spain)

^b UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^c UNIVERSITY OF ALICANTE   (Spain)

Author keywords

Case study; Confidentiality; Data warehouses; MDA; Model driven; OLAP; Security; SSAS; Transformations

Indexed keywords

EID: 84897040963     PISSN: 0948695X     EISSN: 09486968     Source Type: Journal    
DOI: None     Document Type: Article

References (62)

1. Abelló, A., J. Samos and F. Saltor. "YAM2: a multidimensional conceptual model extending UML." Information Systems 31(6): 668-677, 2006.
2. Alberts, C. and A. Dorofee. Managing information security risks: The OCTAVE (SM) approach, Boston: Addison Wesley. 2002.
3. Barreto, F. J., A. Dias and A. Bessa. Security Engineering Approach to Support Software Security. World Congress on Services: 48-55. 2010.
4. Basin, D., J. Doser and T. Lodderstedt. "Model Driven Security: from UML Models to Access Control Infrastructures." ACM Transactions on Software Engineering and Methodology 15(1): 39-91, 2006.
5. Bézivin, J. "In Search of a Basic Principle for Model Driven Engineering." Upgrade 5(2): 21-24, 2004.
6. Binh, N. T., A. M. Tjoa and R. Wagner. An object oriented multidimensional data model for OLAP. Web-Age Information Management. LNCS 1846: 69-82. 2000.
7. Blanco, C., E. Fernández-Medina, J. Trujillo and M. Piattini (2009). Data Warehouse Security. Encyclopedia of Database Systems. L. Liu and M. T. Ozsu, Springer: 675-679.
8. Blanco, C., D. G. Rosado, C. Gutiérrez, A. Rodríguez, D. Mellado, E. Fernández-Medina, J. Trujillo and M. Piattini (2011). Security over the Information Systems Development Cycle. Software Engineering for Secure Systems: Industrial and Research Perspectives. H. Mouratidis. USA, IGI Group Inc: 113-154.
9. Braganca, A. (2007). Methodological Approaches and Techniques for Model Driven Development of Software Product Lines.
10. Braganca, A. and R. Machado. Model Driven Development of Software Product Lines. International Conference on the Quality of Information and Communications Technology, Lisbon, Portugal. 2007.
11. Cuccuru, A., R. De Simone, T. Saunier, G. Siegel and Y. Sorel. P2I: An Innovative MDA Methodology for Embedded Real-Time Systems. Euromicro Conference on Digital System Design. Porto, Portugal: 26-33. 2005.
12. CWM, O. M. G. "Common Warehouse Metamodel (CWM)." 2003.
13. Dubielewicz, I., B. Hnatkowska, Z. Huzar and L. Tuzinkiewicz. Evaluation of MDA-PSM database model quality in the context of selected non-functional requirements. International Conference on Dependability of Computer Systems. Szklarska Poreba, Poland: 19-26. 2007.
14. Fernández-Medina, E., J. Jurjens, J. Trujillo and S. Jajodia. "Model-Driven Development for secure information systems." Information and Software Technology 51(5): 809-814, 2009.
15. Fernández-Medina, E., J. Trujillo, R. Villarroel and M. Piattini. "Access Control and Audit Model for the Multidimensional Modeling of Data Warehouses." Decision Support Systems 42: 1270-1289, 2006.
16. Fernández-Medina, E., J. Trujillo, R. Villarroel and M. Piattini. "Developing Secure Data Warehouses with a UML extension." Information Systems 32(6): 826-856, 2007.
17. Giorgini, P., H. Mouratidis and N. Zannone (2006). Modelling Security and Trust with Secure Tropos. Integrating Security and Software Engineering: Advances and Future Visions, Idea Group Publishing.
18. Golfarelli, M., D. Maio and S. Rizzi. "The Dimensional Fact Model: A Conceptual Model for Data Warehouses." International Journal of Cooperative Information Systems (IJCIS) 7.(2-3): 215-247, 1998.
19. Inmon, W. H. 2.0 - architecture for the next generation of data warehousing, Morgan Kaufmann. 2008.
20. ISO/IEC. ISO/IEC 15408 (Common Criteria v3.0) "Information Technology Security Techniques-Evaluation Criteria for IT Security". 2005.
21. ISO/IEC. ISO/IEC 17799-27002 Code of Practice for Information Security Managament. 2005.
22. Jajodia, S. and D. Wijesekera. "Security in Federated Database Systems." Information Security Technical Report 6(2): 69-79, 2001.
23. Jurjens, J. Secure Systems Development with UML, Springer-Verlag. 2004.
24. Jurjens, J. and H. Schmidt. UMLsec4UML2 - Adopting UMLsec to Support UML2. http://hdl.handle.net/2003/27602, Technical Reports in Computer Science. Technische Universitat Dortmund. 2011.
25. Kirkgoze, R., N. Katic, M. Stolda and A. Min Tjoa. A Security Concept for OLAP. 8th International Workshop on Database and Expert System Applications (DEXA'97). Toulouse, France, IEEE Computer Society: 619-626. 1997.
26. Kraus, A., A. Knapp and N. Koch. Model-Driven Generation of Web Applications in UWE. International Workshop on Model-Driven Web Engineering. Como, Italy. 2007.
27. Li, B., S. Liu and Z. Yu. Applying MDA in traditional Database-based Application Development. International Conference on Computer Supported Cooperative Work in Design. Coventry, UK: 1038-1041. 2005.
28. Liu, Y., S. Sung and H. Xiong. "A cubic-wise balance approach for privacy perservation in data cubes." Information Sciences 176(9): 1215-1240, 2006.
29. Lodderstedt, T., D. Basin and J. Doser. SecureUML: A UML-based modeling language for model-driven security. UML 2002. The Unified Modeling Language. Model Engineering, Languages Concepts, and Tools. 5th International Conference, Dresden, Germany, Springer. 2002.
30. Lu, S., W. A. Halang and L. Zhang. A Component-based UML Profile to Model Embedded Real-Time Systems Designed by the MDA Approach. International Conference on Embedded and Real-Time Computing Systems and Applications. Hong Kong, China: 563-566. 2005.
31. Luján-Mora, S., J. Trujillo and I. Y. Song. "A UML profile for multidimensional modeling in data warehouses." Data & Knowledge Engineering 59(3): 725-769, 2006.
32. Meliá, S. and J. Gomez. "The WebSA Approach: Applying Model Driven Engineering to Web Applications." Journal of Web Engineering 5(2): 121-149, 2006.
33. Mellor, Clark and Futugami. "Model-driven development - Guest editor's introduction." IEEE Software 20(5): 14-18, 2003.
34. Moebius, N., K. Stenzel and W. Reif. Generating formal specifications for security-critical applications - A model-driven approach: 68-74. 2009.
35. Mouratidis, H. Software Engineering for Secure Systems: Industrial and Research Perspectives, IGI Global. 2011.
36. Mundy, J., W. Thornthwaite and R. Kimball. The Microsoft Data Warehouse Toolkit: With SQL Server 2008 R2 and the Microsoft Business Intelligence Toolset, Wiley. 2011.
37. OMG. CWM. Common Warehouse Metamodel. Version v1.1, http://www.omg.org/spec/CWM/1.1. 2003.
38. OMG. MDA. Model Driven Architecture Guide Version 1.0.1. 2003.
39. Paim, F. R. S. and J. Castro. DWARF: An approach for requirements definition and management of data warehouse systems. IEEE International Conference on Requirements Engineering: 75-84. 2003.
40. Prat, N., J. Akoka and I. Comyn-Wattiau. "A UML-based data warehouse design method." Decision Support Systems 42(3): 1449-1473, 2006.
41. Priebe, T. and G. Pernul. A Pragmatic Approach to Conceptual Modeling of OLAP Security. 20th International Conference on Conceptual Modeling (ER 2001), Yokohama, Japan, Springer-Verlag. 2001.
42. Priebe, T. and G. Pernul. A Pragmatic Approach to Conceptual Modeling of OLAP Security. 20th International Conference on Conceptual Modeling (ER 2001). Yokohama, Japan, Springer-Verlag. 2001.
43. Saltor, F., M. Oliva, A. Abelló and J. Samos. Building Secure Data Warehouse Schemas from Federated Information Systems. Heterogeneous Inf. Exchange and Organizational Hubs. H. Bestougeff, Dubois, J.E., Thuraisingham, B. Dordrecht, The Netherlands, Kluwer Academic Publisher: 123-134. 2002.
44. Sapia, C., M. Blaschka, G. Höfling and B. Dinter. Extending the E/R Model for the Multidimensional Paradigm. 1st International Workshop on Data Warehouse and Data Mining (DWDM'98), Singapore, Springer-Verlag. 1998.
45. Shoshani, A. OLAP and Statistical Databases: Similarities and Differences. PODS 97, Tucson, AZ. 1997.
46. Simitsis, A. and P. Vassiliadis. "A method for the mapping of conceptual designs to logical blueprints for ETL processes." Decision Support Systems, 2007.
47. Soler, E., J. Trujillo, C. Blanco and E. Fernández-Medina. "Designing Secure Data Warehouses by Using MDA and QVT." Journal of Universal Computer Science (JUCS) 15(8): 1608-1641, 2009.
48. SSE-CMM. Systems Security Engineering - Capability Maturity Model. http://www.sse-cmm.org. 2003.
49. Sung, Y., Y. Liu, H. Xiong and P. A. Xg. "Privacy preservation for data cubes." Knowledge Information Systems 9(1): 38-61, 2006.
50. Tan, W., L. Ma, J. Li and Z. Xiao. Application MDA in a Conception Design Environment. International Multi-Symposiums on Computer and Computational Sciences. Hangzhou, China: 702-704. 2006.
51. Thuraisingham, B. "Security Issues for Federated Database Systems." Computer and Security 13(6): 509-525, 1994.
52. Thuraisingham, B., M. Kantarcioglu and S. Iyer. "Extended RBAC-based design and implementation for a secure data warehouse." International Journal of Business Intelligence and Data Mining (IJBIDM) 2(4): 367-382, 2007.
53. Trujillo, J. and S. Luján-Mora (2003). A UML Based Approach for Modeling ETL Processes in Data Warehouses. Conceptual Modeling - ER 2003. S. B. Heidelberg. Volume 2813/2003: 307-320.
54. Trujillo, J., E. Soler, E. Fernández-Medina and M. Piattini. "An Engineering Process for Developing Secure Data Warehouses." Information and Software Technology 51(6): 1033-1051, 2009.
55. Tryfona, N., F. Busborg and J. Christiansen. starER: A Conceptual Model for Data Warehouse Design. ACM 2nd International Workshop on Data Warehousing and OLAP (DOLAP'99), Missouri, USA, ACM. 1999.
56. van de Riet, R. P. "Twenty-five years of Mokum: For 25 years of data and knowledge engineering: Correctness by design in relation to MDE and correct protocols in cyberspace." Data & Knowledge Engineering 67(2): 293-329, 2008.
57. Vara, J. M., B. Vela, J. M. Cavero and E. Marcos. Model transformation for object-relational database development. ACM Symposium on Applied Computing. Seoul, Korea: 1012-1019. 2007.
58. Vela, B., C. J. Acuna and E. Marcos. A Model Driven Approach for XML Database Development. International Conference on Conceptual Modeling. Shanghai, China: 780-794. 2004.
59. Wang, L., S. Jajodia and D. Wijesekera. Securing OLAP Data Cubes Against Privacy Breaches. IEEE Symposium on Security and Privacy. Berkeley, California: 161-178. 2004.
60. Wang, Y., X. Zhou, L. Liang and C. Peng. A MDA based SoC Modeling Approach using UML and SystemC. International Conference on Computer and Information Technology. Baridhara, Bangladesh: 245-251. 2006.
61. Weippl, E., O. Mangisengi, W. Essmayr, F. Lichtenberger and W. Winiwarter. An Authorization Model for Data Warehouses and OLAP. Workshop on Security in Distributed Data Warehousing. New Orleans, Louisiana, USA. 2001.
62. Yu, B., C. Zhang and Y. Zhao. Transform from Models to Service Description Based on MDA. Asia-Pacific Conference on Services Computing. GuangZhou, China: 605-608. 2006.