A model-driven methodology for developing secure data-management applications

IEEE Transactions on Software Engineering

Volumn 40, Issue 4, 2014, Pages 324-337

  Basin, David ^a   Clavel, Manuel ^b   Egea, Marina ^c   De Dios, Miguel A García ^b   Dania, Carolina ^b  

^a ETH ZURICH   (Switzerland)

^b IMDEA SOFTWARE INSTITUTE   (Spain)

^c Atos Research and Innovation   (Spain)

Author keywords

access control; GUI models; Model transformation; Model driven development; model driven security

Indexed keywords

ACCESS CONTROL;

AUTHORIZATION POLICY; GRAPHICAL INTERFACE; MODEL DRIVEN DEVELOPMENT; MODEL TRANSFORMATION; MODEL-DRIVEN METHODOLOGY; MODEL-DRIVEN SECURITIES; MULTI-TIER APPLICATIONS; SEPARATION OF CONCERNS;

GRAPHICAL USER INTERFACES;

EID: 84900546483     PISSN: 00985589     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSE.2013.2297116     Document Type: Article

References (30)

1. ActionGUI, "The ActionGUI project," http://www.actiongui.org, 2013.
2. D.A. Basin, M. Clavel, M. Egea, M.A.G. de Dios, C. Dania, G. Ortiz, and J. Valdazo, "Model-Driven Development of Security-Aware GUIs for Data-Centric Applications," Foundations of Security Analysis and Design VI, pp. 101-124, Springer, 2011.
3. D.A. Basin, M. Clavel, M. Egea, and M. Schlapfer, "Automatic Generation of Smart, Security-Aware GUI Models," Proc. Second Int?l Symp. Eng. Secure Software and Systems (ESSoS ?10), Feb. 2010, pp. 201-217.
4. A. Kleppe, W. Bast, J.B. Warmer, and A. Watson, MDA Explained: The Model Driven Architecture-Practice and Promise. Addison-Wesley, 2003.
5. Object Management Group, "Model Driven Architecture Guide v. 1.0.1," technical report, OMG, http://www.omg.org/cgi-bindocomg/03-06-01, 2003.
6. D. Basin, J. Doser, and T. Lodderstedt, "Model Driven Security: From UML Models to Access Control Infrastructures.," ACM Trans. Software Eng. and Methodology, vol. 15, no. 1, pp. 39-91, 2006. (Pubitemid 43947939)
7. ActionGUI, "ActionGUI Semantics," technical report, IMDEA & ETH, http://www.actiongui.org, 2013.
8. Object Management Group, "Object Constraint Language Specification Version 2.3.1," technical report, OMG, http://www.omg. org/spec/OCL/2.3.1, 2012.
9. D.F. Ferraiolo, R.S. Sandhu, S. Gavrila, D.R. Kuhn, and R. Chandramouli, "Proposed NIST Standard for Role-Based Access Control," ACM Trans. Information and System Security, vol. 4, no. 3, pp. 224-274, 2001.
10. H. Baumeister, N. Koch, and L. Mandel, "Towards a UML Extension for Hypermedia Design," Proc. Second Int?l Conf. Unified Modeling Language: Beyond the Standard (UML?99), 1999, pp. 614-629.
11. M. Busch and N. Koch, "MagicUWE-A Case Tool Plugin for Modeling Web Applications," Proc. Ninth Int?l Conf. Web Eng. (ICWE ?09), 2009, pp. 505-508.
12. M. Busch, "Integration of Security Aspects in Web Engineering," master?s thesis, Inst. f€ur Informatik, Ludwig-Maximilians-Univ., 2011.
13. C. Kroiss, N. Koch, and A. Knapp, "UWE4JSF: A Model-Driven Generation Approach for Web Applications," Proc. Ninth Int?l Conf. Web Eng. (ICWE ?09), 2009, pp. 493-496.
14. X. Jia, A. Steele, L. Qin, H. Liu, and C. Jones, "Executable Visual Software Modeling-The ZOOM Approach," Software Quality Control, vol. 15, pp. 27-51, Mar. 2007.
15. M. Busch and M.A.G. de Dios, "ActionUWE: Transformation of UWE to ActionGUI models," http://uwe.pst.ifi.lmu.de/publicationsActionUWE.pdf, 2012.
16. J. Woodcock and J. Davies, Using Z: Specification, Refinement, and Proof. Prentice Hall, 1996.
17. A.M.R. da Cruz, "Automatic Generation of User Interfaces from Rigorous Domain and Use Case Models," PhD dissertation, Faculdade de Engenharia da Univ. do Porto, Sept. 2010.
18. A.M.R. da Cruz and J.P. Faria, "A Metamodel-Based Approach for Automatic User Interface Generation," Proc. 13th Int?l Conf. Model Driven Eng. Languages and Systems: Part I (MODELS ?10), Oct. 2010, pp. 256-270.
19. M. Elkoutbi, I. Khriss, and R. Keller, "Automated Prototyping of User Interfaces Based on UML Scenarios," Automated Software Eng., vol. 13, pp. 5-40, 2006. (Pubitemid 41831862)
20. O. Pastor, J. G-omez, E. Insfr-an, and V. Pelechano, "The OOMethod Approach for Information Systems Modeling: From Object-Oriented Conceptual Modeling to Automated Programming," Information Systems, vol. 26, no. 7, pp. 507-534, 2001. (Pubitemid 32968846)
21. P.J. Molina, S. Meli-a, and O. Pastor, "Just-UI: A User Interface Specification Model," Proc. Int?l Conf. Computer-Aided Design of User Interfaces (CADUI ?02), 2002, pp. 63-74.
22. S. Ceri and P. Fraternali, "The Web Modeling Language- WebML," http://www.webml.org, 2003.
23. Web Models Company, "Web Ratio-You Think, You Get," http://www.webratio.com, 2010.
24. A. Schramm, A. Preußner, M. Heinrich, and L. Vogel, "Rapid UI Development for Enterprise Applications: Combining Manual and Model-Driven Techniques," Proc. 13th Int?l Conf. Model Driven Eng. Languages and Systems: Part I, Oct. 2010, pp. 271-285.
25. V. Kulkarni, S. Reddy, and A. Rajbhoj, "Scaling Up Model Driven Engineering-Experience and Lessons Learnt," Proc. 13th Int?l Conf. Model Driven Eng. Languages and Systems: Part II, Oct. 2010, pp. 331-345.
26. Mozilla Foundation, "XML User Interface Language (XUL)," https://developer.mozilla.org/en-US/docs/XUL, 2013.
27. Q. Limbourg, J. Vanderdonckt, B. Michotte, L. Bouillon, and V. L-opez-Jaquero, "UsiXML: A Language Supporting Multi-Path Development of User Interfaces," Proc. Ninth IFIP Working Conf. Eng. for Human-Computer Interaction jointly with 11th Int?l Workshop Design, 2004, pp. 200-220.
28. G. Calvary, J. Coutaz, L. Bouillon, M. Florins, Q. Limbourg, L. Marucci, F. Patern-o, C. Santoro, N. Souchon, D. Thevenin, and J. Vanderdonckt, "The CAMELEON Reference Framework," http://giove.isti.cnr.it/projects/cameleon. html, 2002.
29. J. Valdazo, "Developing Secure Business Applications from Secure BPMN models," master?s thesis, Facultad de Inform-atica, Univ. Complutense de Madrid, 2012.
30. D.A. Basin, M. Clavel, and M. Egea, "USenglish: A Decade of Model-Driven Security," Proc. 16th ACM Symp. Access Control Models and Technologies (SACMAT ?11), 2011, pp. 1-10.