Towards a Model Driven Security for critical infrastructures using OrBAC

International Conference on Multimedia Computing and Systems -Proceedings

Volumn , Issue , 2014, Pages 1235-1240

  Kaddani, Aziz ^a   Baina, Amine ^a   Echabbi, Loubna ^a  

^a National Institute of Posts and Telecommunications Morocco   (Morocco)

Author keywords

Critical Infrastructure; Electrical Grid; Model Driven Architecture; Model Driven Security; Organization Based Access Control

Indexed keywords

ACCESS CONTROL; CRITICAL INFRASTRUCTURES; ELECTRIC POWER TRANSMISSION NETWORKS; EMBEDDED SYSTEMS; PUBLIC WORKS; SOFTWARE DESIGN;

AUTOMATICALLY GENERATED; ECLIPSE MODELING FRAMEWORK; ELECTRICAL GRIDS; MODEL DRIVEN ARCHITECTURES; MODEL DRIVEN SECURITY; MODEL FRAMEWORK; SECURITY REQUIREMENTS; SYSTEM ARCHITECTURES;

SOFTWARE ARCHITECTURE;

EID: 84928731266     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICMCS.2014.6911301     Document Type: Conference Paper

References (25)

1. D. Vidakovic and D. Simic, "A Novel Approach to Building Secure Systems", in the Second International Conference on Availability, Reliability and Security (ARES), April 2007, pp. 1074-1084
2. T. Lodderstedt, D. Basin, and J. Doser, "SecureUML: A UML-Based Modeling Language for Model-Driven Security", in Proceedings of the 5th International Conference on the Unified Modeling Language, London, UK, 2002, pp. 426-441
3. J. Jlirjens, "UMLsec: Extending UML for Secure Systems Development", in UML 2002-The Unified Modeling Language, J.-M. Jezequel, H. Hussmann and S. Cook, Ed. Springer Berlin Heidelberg, 2002, pp. 412-425
4. D. Munante, J. Gallon and P. Aniorte, "An Approach Based on ModelDriven Engineering to Define Security Policies Using OrBAC", in the 8th International Conference on Availability, Reliability and Security (ARES), September 2013, pp. 324-332
5. A. A. E. Kalam, R. E. Baida, P. Balbiani, S. Benferhat, F. Cuppens, Y. Deswarte, A. Miege, C. Saurel and G. Trouessin, "Organization based access control", in IEEE 4th International Workshop on Policies for Distributed Systems and Networks (POLICY), June 2003, pp. 120-131
6. A. A. EI Kalam, Y. Deswarte, A. Barna, and M. Kaiinich, "PolyOrBAC: A security framework for Critical Infrastructures", International Journal of Critical. Infrastructures Protection, vol. 2, n 4, december 2009, pp. 154-169
7. A. A. EI Kalam, A. A. EI Hassani and A. A. Ouahman, "IntegrityOrBAC: An OrBAC enhancement that takes into account integrity", in the 8th International Conference on Intelligent Systems: Theories and Applications (SIT A), May 2013, pp. 1-7
8. A. A. EI Kalam, Y. Deswarte, A. Baina and M. Kaaniche, "Access Control for Collaborative Systems: A Web Services Based Approach", in IEEE International Conference on Web Services (JCWS), July 2007, pp. I064-1071
9. D. Basin, "Model Driven Security", in Proceedings of the First International Conference on Availability, Reliability and Security, Washington, DC, USA, 2006, pp. 4
10. D. Basin, J. Doser and T. Lodderstedt, "Model Driven Security", in Engineering Theories of Software Intensive Systems, vol. 195, M. Broy, J. Grlinbauer, D. Harel and T. Hoare, Ed. Springer Netherlands, 2005, pp. 353-398
11. D. Basin, J. Doser and T. Lodderstedt, "Model driven security: From UML models to access control infrastructures", ACM Transactions on Software Engineering and Methodology, vol. 15, nO I, January 2006, pp. 39-91
12. D. Basin, M. Clavel and M. Egea, "A decade of model-driven security", in Proceedings of the 16th ACM symposium on Access control models and technologies, New York, USA, 2011, pp. 1-10
13. Y. Singh and M. Sood, "Model Driven Architecture: A Perspective", in IEEE International Advance Computing Conference (IACC), March 2009, pp. 1644-1652
14. "Unified Modeling Language http://www.uml.org/. UML". Available on:
15. D. Steinberg, F. Budinsky, M. Paternostro and E. Merks, "EMF: Eclipse Modeling Framework", 2nd Edition, Addison-Wesley Professional. Part of the Eclipse Series, December 2008
16. R. S. Sandhuet and P. Samarati, "Access control: principle and practice", IEEE Commun. Mag., vol. 32, nO 9, September 1994, pp. 40-48
17. S. Sandhu, E. J. Coyne, H. J. Feinstein and C. E. Youman, "Role-Based Access Control Models", Computer, vol. 29, nO 2, February 1996, pp. 38-47
18. F. Autrel, F. Cuppens, N. Cuppens-Boulahia and C. Coma, "MotOrBAC 2: a security policy tool", in Conference on Security in Networks Architectures and Security of Information Systems (SARSSI) , October 2008
19. "Object Management http://www.omg.org/. Group-OMG". Available on:
20. "MetaObject Facility-MOF". Available on: http://www.omg.org/mof/
21. "Extensible Markup Language (XML) 1.0 (Fifth Edition)". Available on: http://www.w3.org/TRlREC-xml/
22. "XML Metadata Interchange (XMI) 2.4.1". Available on: http://www.omg.org/spec/XMII2.4.I/
23. M. Weiss, "XML Metadata Interchange", in Encyclopedia of Database Systems, J. LlU and M. T. OZSU, Ed. Springer US, 2009, pp. 3597
24. T. Schaberreiter, J. Aubert and D. Khadraoui, "Critical infrastructure security modelling and RESCI-MONITOR: A risk based critical infrastructure model", in 1ST-Africa Conference Proceedings, May 2011, pp. 1-8
25. F. Cleveland, "Enhancing the Reliability and Security of the Information Infrastructure Used to Manage the Power System", in IEEE Power Engineering Society General Meeting, June 2007, pp. 1-8.