An extensive systematic review on the Model-Driven Development of secure systems

Information and Software Technology

Volumn 68, Issue , 2015, Pages 62-81

  Nguyen, Phu H ^a   Kramer, Max ^b   Klein, Jacques ^c   Traon, Yves Le ^c  

^a SIMULA RESEARCH LABORATORY   (Norway)

^b KARLSRUHE INSTITUTE OF TECHNOLOGY   (Germany)

^c UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

MDE; MDS; Model Driven Engineering; Model Driven Security; Software security engineering; Systematic review

Indexed keywords

MENDELEVIUM; PROBLEM ORIENTED LANGUAGES; SEARCH ENGINES;

DOMAIN SPECIFIC LANGUAGES; MODEL DRIVEN DEVELOPMENT; MODEL DRIVEN SECURITY; MODEL-DRIVEN ENGINEERING; POTENTIAL RESEARCHES; SOFTWARE SECURITY; SYSTEMATIC LITERATURE REVIEW (SLR); SYSTEMATIC REVIEW;

MODELING LANGUAGES;

EID: 84942611940     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2015.08.006     Document Type: Article

References (131)

1. J. Abramov, O. Anson, M. Dahan, P. Shoval, and A. Sturm A methodology for integrating access control policies within database development Comput. Secur. 31 3 2012 299 314 10.1016/j.cose.2012.01.004
2. J. Abramov, O. Anson, A. Sturm, and P. Shoval Tool support for enforcing security policies on databases IS Olympics: Information Systems a Diverse World 2012 Springer Berlin Heidelberg 126 141
3. J. Abramov, A. Sturm, and P. Shoval Evaluation of the pattern-based method for secure development (PbSD): a controlled experiment Inf. Softw. Technol. 54 9 2012 1029 1043 10.1016/j.infsof.2012.04.001
4. G. Ahn, and H. Hu Towards realizing a formal RBAC model in real systems Proceedings of the 12th ACM symposium on Access Control Models and Technologies 2007 215 10.1145/1266840.1266875
5. M. Alam Model driven security engineering for the realization of dynamic security requirements in collaborative systems Models Softw. Eng. 4364 2007 278 287 10.1007/978-3-540-69489-2-34
6. M. Alam, R. Breu, and M. Breu Model driven security for Web services (MDS4WS) Proceedings of the 8th International Multitopic Conference, INMIC 2004 498 505 10.1109/INMIC.2004.1492930
7. M. Alam, R. Breu, and M. Hafner Modeling permissions in a (U/X) ML world Proceedings of International Conference on Availability, Reliability and Security, ARES vol. 8 2006 692 10.1109/ARES.2006.84
8. M. Alam, M. Hafner, and R. Breu A constraint based role based access control in the SECTET a model-driven approach Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services 2006 1 13
9. M. Alam, M. Hafner, R. Breu, and S. Unterthiner A framework for modeling restricted delegation in service oriented architecture Proceedings of International Conference on Trust and Privacy in Digital Business 2006 142 151
10. M. Almorsy, and J. Grundy Secdsvl: a domain-specific visual language to support enterprise security modelling Proceedings of the 23rd Australian Software Engineering Conference (ASWEC) 2014 IEEE 152 161
11. M. Almorsy, J. Grundy, and A.S. Ibrahim Mdse@ r: model-driven security engineering at runtime Cyberspace Safety and Security 2012 Springer 279 295
12. M. Almorsy, J. Grundy, and A.S. Ibrahim Adaptable, model-driven security engineering for SaaS cloud-based applications Autom. Softw. Eng. 21 2 2013 187 224 10.1007/s10515-013-0133-z
13. D. Basin, M. Clavel, J. Doser, and M. Egea A metamodel-based approach for analyzing security-design models G. Engels, B. Opdyke, D. Schmidt, F. Weil, Model Driven Engineering Languages and Systems Volume 4735 of Lecture Notes in Computer Science 2007 Springer Berlin, Heidelberg 420 435 10.1007/978-3-540-75209-7-29
14. D. Basin, M. Clavel, J. Doser, and M. Egea Automated analysis of security-design models Inf. Softw. Technol. 51 5 2009 815 831 10.1016/j.infsof.2008.05.011
15. D. Basin, M. Clavel, and M. Egea A decade of model-driven security Proceedings of the 16th ACM symposium on Access Control Models and Technologies, SACMAT'11 2011 ACM New York, NY, USA 1 10 10.1145/1998441.1998443
16. D. Basin, M. Clavel, and M. Egea Model-driven development of security-aware GUIs for data-centric applications Foundations of Security Analysis and Design VI 2011 Springer Berlin Heidelberg 101 124
17. D. Basin, M. Clavel, M. Egea, M.A.G. de Dios, and C. Dania A model-driven methodology for developing secure data-management applications IEEE Trans. Softw. Eng. 40 4 2014 324 337
18. D. Basin, J. Doser, and T. Lodderstedt Model driven security for process-oriented systems Proceedings of the Eighth ACM Symposium on Access Control Models and Technologies, SACMAT'03 2003 ACM 100 109
19. D. Basin, J. Doser, and T. Lodderstedt Model driven security: from UML models to access control infrastructures ACM Trans. Softw. Eng. Methodol. 15 2006 39 91 10.1145/1125808.1125810
20. A. Bertolino, M. Busch, S. Daoudagh, F. Lonetti, and E. Marchetti A toolchain for designing and testing access control policies Engineering Secure Future Internet Services and Systems 2014 Springer 266 286
21. B. Best, J. Jürjens, and B. Nuseibeh Model-based security engineering of distributed information systems using UMLsec Proceedings of the 29th International Conference on Software Engineering, ICSE 2007 581 590
22. J. Bezivin Model driven engineering: an emerging technical space Proceedings of International Summer School on Generative and Transformational Techniques in Software Engineering 2006 36 64
23. J. Biolchini, P.G. Mian, A.C.C. Natali, and G.H. Travassos System Engineering and Computer Science Department 2005 45
24. C. Blanco Applying QVT in order to implement secure data warehouses in SQL server analysis services J. Res. Pract. Inf. Technol. 41 2 2009 135
25. C. Blanco, E. Fernandez-Medina, and J. Trujillo Modernizing secure OLAP applications with a model-driven approach Comput. J. 2014 10.1093/comjnl/bxu070
26. C. Blanco, and I. de Guzmán Showing the benefits of applying a model driven architecture for developing secure OLAP applications. J. UCS 20 2 2014 79 106
27. C. Blanco, and R. Pérez-Castillo Towards a modernization process for secure data warehouses Proceedings of International Conference on Data Warehousing and Knowledge Discovery, MDA 2003 2009 pp.24 35
28. M. Borek, N. Moebius, K. Stenzel, and W. Reif Model-driven development of secure service applications Proceedings of the 35th Annual IEEE Software Engineering Workshop 2012 62 71 10.1109/SEW.2012.13
29. R. Bouaziz, S. Kallel, and B. Coulette An engineering process for security patterns application in component based models Proceedings of the 2013 Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises 2013 IEEE 231 236 10.1109/WETICE.2013.27
30. C. Braga A transformation contract to generate aspects from access control policies Softw. Syst. Model. 10 3 2011 395 409 10.1007/s10270-010-0156-x
31. M. Brambilla, J. Cabot, and M. Wimmer Model-Driven Software Engineering in Practice 1st edition Synthesis Lectures on Software Engineering 2012 Morgan & Claypool Publishers http://dx.doi.org/10.2200/S00441ED1V01Y201208SWE001
32. R. Breu, M. Hafner, F. Innerhofer-Oberperfler, and F. Wozak Model-driven security engineering of service oriented systems Information Systems and e-Business Technologies Lecture Notes in Business Information Processing 2008 Springer Berlin, Heidelberg 59 71
33. R. Breu, M. Hafner, B. Weber, and A. Novak Model driven security for inter-organizational workflows in e-government E-Government: Towards Electronic Democracy 2005 Springer Berlin Heidelberg 122 133
34. R. Breu, G. Popp, and M. Alam Model based development of access policies Int. J. Softw. Tools Technol. Transf. 9 5-6 2007 457 470 10.1007/s10009-007-0045-y
35. A. Brucker, J. Doser, and B. Wolff A model transformation semantics and analysis methodology for SecureUML Lecture Notes in Computer Science 2006 Springer Berlin, Heidelberg 306 320
36. C. Burt, B. Bryant, and R. Raje Model driven security: unification of authorization models for fine-grain access control Proceedings of Enterprise Distributed Object Computing Conference 2003 159 171 10.1109/EDOC.2003.1233846
37. M. Busch, N. Koch, and S. Suppan Modeling security features of web applications Engineering Secure Future Internet Services and Systems 2014 Springer 119 139
38. M. Clavel, V. Silva, C. Braga, and M. Egea Model-driven security in practice: an industrial experience Model Driven Architecture - Foundations and Applications Lecture Notes in Computer Science 2008 Springer Berlin, Heidelberg 326 337
39. I. Crnkovic, S. Sentilles, A. Vulgarakis, and M.R. Chaudron A classification framework for software component models IEEE Trans. Softw. Eng. 37 5 2011 593 615
40. M. de Dios, C. Dania, D. Basin, and M. Clavel Model-driven development of a secure eHealth application Engineering Secure Future Internet Services and Systems 2014 Springer International Publishing 97 118
41. M. Eby, and J. Werner Integrating security modeling into embedded system design Proceedings of Engineering of Computer-Based Systems 2007 221 228 10.1109/ECBS.2007.45
42. Y. Elrakaiby, M. Amrani, and Y.L. Traon Security@Runtime: a flexible MDE approach to enforce fine-grained security policies Proceedings of International Symposium on Engineering Secure Software and Systems 2014 19 34
43. E. Fernández-Medina, and M. Piattini Extending OCL for secure database development UML 2004 - The Unified Modeling Language. Modeling Languages and Applications 2004 Springer Berlin Heidelberg 380 394
44. E. Fernández-Medina, and M. Piattini Designing secure databases Inf. Softw. Technol. 47 7 2005 463 477 10.1016/j.infsof.2004.09.013
45. E. Fernández-Medina, and J. Trujillo Extending UML for designing secure data warehouses Proceedings of International Conference on Conceptual Modeling, ER 2004 217 230
46. E. Fernández-Medina, J. Trujillo, R. Villarroel, and M. Piattini Developing secure data warehouses with a UML extension Inf. Syst. 32 6 2006 826 856 10.1016/j.is.2006.07.003
47. T. Fink, M. Koch, and K. Pauls An MDA approach to access control specifications using MOF and UML profiles Electron. Notes Theor. Comput. Sci. 142 2006 161 179 10.1016/j.entcs.2004.12.045
48. J. Fox, and J. Jurjens Introducing security aspects with model transformation Proceedings of International Conference on Engineering of Computer-Based Systems, ECBS'05 2005
49. J. Gallino, and M.D. Miguel Domain-specific multi-modeling of security concerns in service-oriented architectures Proceedings of International Workshop on Web Services and Formal Methods 2012 128 142
50. G. Georg, I. Ray, K. Anastasakis, B. Bordbar, M. Toahchoodee, and S.H. Houmb An aspect-oriented methodology for designing secure applications Inf. Softw. Technol. 51 5 2009 846 864 10.1016/j.infsof.2008.05.004
51. S. Gilmore, L. Gönczy, N. Koch, P. Mayer, M. Tribastone, and D. Varró Non-functional properties in the model-driven development of service-oriented systems Softw. Syst. Model. 10 3 2010 287 311 10.1007/s10270-010-0155-y
52. M. Hafner, M. Alam, and R. Breu Towards a MOF/QVT-based domain architecture for model driven security Proceedings of Model Driven Engineering Languages and Systems 2006 275 290
53. M. Hafner, and R. Breu Realizing model driven security for inter-organizational workflows with WS-CDL and UML 2.0 Proceedings of Model Driven Engineering Languages and Systems 3713 2005 39 53 10.1007/11557432-4
54. M. Hafner, and R. Breu Extending sectet: advanced security policy Security Engineering for Service-Oriented Architectures 2009 Springer Berlin, Heidelberg 159 188 10.1007/978-3-540-79539-1-7
55. M. Hafner, and R. Breu Modeling security critical SOA applications Security Engineering for Service-Oriented Architectures 2009 Springer Berlin, Heidelberg 93 119 10.1007/978-3-540-79539-1-7
56. M. Hafner, M. Memon, and M. Alam Modeling and enforcing advanced access control policies in healthcare systems with sectet Models in Software Engineering 2008 Springer Berlin Heidelberg 132 144
57. B. Hoisl, and S. Sobernig Integrity and confidentiality annotations for service interfaces in SoaML models Proceedings of International Conference on Availability, Reliability and Security (ARES) 2011 673 679 10.1109/ARES.2011.105
58. B. Hoisl, S. Sobernig, and M. Strembeck Modeling and enforcing secure object flows in process-driven SOAs: an integrated model-driven approach Softw. Syst. Model. 13 2 2012 513 548 10.1007/s10270-012-0263-y
59. J.-M. Horcas, M. Pinto, and L. Fuentes An aspect-oriented model transformation to weave security using cvl Proceedings of the 2nd International Conference on Model-Driven Engineering and Software Development, MODELSWARD 2014 IEEE 138 150
60. J. Hutchinson, J. Whittle, M. Rouncefield, and S. Kristoffersen Empirical assessment of MDE in industry Proceedings of the 33rd International Conference on Software Engineering, ICSE'11 2011 ACM New York, NY, USA 471 480 10.1145/1985793.1985858
61. S. Jalali, and C. Wohlin Systematic literature studies: database searches vs. backward snowballing Proceedings of the ACM-IEEE International Symposium on Empirical Software Engineering and Measurement 2012 ACM 29 38
62. J. Jensen, and M.G. Jaatun Security in model driven development: a survey Proceedings of the 2011 Sixth International Conference on Availability, Reliability and Security, ARES'11 2011 IEEE Computer Society Washington, DC, USA 704 709 10.1109/ARES.2011.110
63. J. Jürjens UMLsec: extending UML for secure systems development UML 2002 - The Unified Modeling Language 2002 Springer Berlin Heidelberg 1 9
64. J. Jürjens Using UMLsec and goal trees for secure systems development Proceedings of the 2002 ACM symposium on Applied Computing 2002 1026 1030
65. J. Jürjens Model-based security engineering with UML Foundations of Security Analysis and Design III 2005 Springer Berlin Heidelberg 42 77
66. J. Jürjens Model-based security engineering for real Proceedings of International Symposium on Formal Methods, FM 2006 2006 600 606
67. J. Jürjens, and S. Houmb Dynamic secure aspect modeling with UML: from models to code Proceedings of Model Driven Engineering Languages and Systems 2005 142 155
68. J. Jürjens, L. Marchal, M. Ochoa, and H. Schmidt Incremental security verification for evolving UMLsec models Proceedings of European Conference on Modelling Foundations and Applications 2011 52 68
69. J. Jürjens, and P. Shabalin Tools for secure systems development with UML Int. J. Softw. Tools Technol. 9 5-6 2007 527 544 10.1007/s10009-007-0048-8
70. A. Kaddani, A. Baina, and L. Echabbi Towards a model driven security for critical infrastructures using OrBAC Proceedings of the 2014 International Conference on Multimedia Computing and Systems, ICMCS 2014 IEEE 1235 1240
71. K. Kasal, J. Heurix, and T. Neubauer Model-driven development meets security: an evaluation of current approaches Proceedings of the 2011 44th Hawaii International Conference on System Sciences, HICSS'11 2011 IEEE Computer Society Washington, DC, USA 1 9 10.1109/HICSS.2011.310
72. B. Katt, M. Gander, R. Breu, and M. Felderer Enhancing model driven security through pattern refinement techniques Proceedings of International Symposium on Formal Methods for Components and Objects 2013 169 183
73. A.A. Khwaja, and J.E. Urban A synthesis of evaluation criteria for software specifications and specification techniques Int. J. Softw. Eng. Knowl. Eng. 12 5 2002 581 599 10.1142/S0218194002001062
74. D.-K. Kim, and P. Gokhale A pattern-based technique for developing UML models of access control systems Proceedings of the 30th Annual International Computer Software and Applications Conference, 2006. COMPSAC'06 2006 317 324 10.1109/COMPSAC.2006.14
75. D.-K. Kim, I. Ray, R. France, and N. Li Modeling role-based access control using parameterized UML models Fundamental Approaches to Software Engineering Lecture Notes in Computer Science 2004 Springer Berlin, Heidelberg 180 193
76. S. Kim, D.-K. Kim, L. Lu, S. Kim, and S. Park A feature-based approach for modeling role-based access control systems J. Syst. Softw. 84 12 2011 2035 2052 10.1016/j.jss.2011.03.084
77. B. Kitchenham, Guidelines for Performing Systematic Literature Reviews in Software Engineering, EBSE Technical Report, EBSE,2007.
78. T. Lodderstedt, D. Basin, and J. Doser SecureUML: a UML-based modeling language for model-driven security UML 2002 - The Unified Modeling Language Lecture Notes in Computer Science 2002 Springer Berlin, Heidelberg 426 441
79. L. Lucio, Q. Zhang, P.H. Nguyen, M. Amrani, J. Klein, H. Vangheluwe, and Y. Le Traon Advances in Model-Driven Security 2014 Elsevier
80. M. Memon, and G. Menghwar Security modeling for service-oriented systems using security pattern refinement approach Softw. Syst. Model. 2012 10.1007/s10270-012-0268-6
81. T. Mens, and P. Van Gorp A taxonomy of model transformation Electron. Notes Theor. Comput. Sci. 152 2006 125 142
82. M. Menzel A Pattern-driven generation of security policies for service-oriented architectures Proceedings of International Conference on Web Services, ICWS 2010 243 250 10.1109/ICWS.2010.25
83. M. Menzel, and C. Meinel A security meta-model for service-oriented architectures Proceedings of the 2009 IEEE International Conference on Services Computing 2009 251 259 10.1109/SCC.2009.57
84. M. Menzel, and C. Meinel SecureSOA modelling security requirements for service-oriented architectures Proceedings of IEEE International Conference on Services Computing, SCC 2010 146 153 10.1109/SCC.2010.63
85. N. Moebius, W. Reif, and K. Stenzel Modeling security-critical applications with UML in the SecureMDD approach Int. J. Adv. Intell. Syst. 1 1 2009 59 79
86. N. Moebius, and K. Stenzel Model-driven code generation for secure smart card applications Proceedings of Australian Software Engineering Conference Software Engineering 2009 44 53 10.1109/ASWEC.2009.15
87. N. Moebius, K. Stenzel, M. Borek, and W. Reif Incremental development of large, secure smart card applications Proceedings of the Workshop on Model-Driven Security 2012 1 6 10.1145/2422498.2422507 http://mdsec2012.pst.ifi.lmu.de
88. N. Moebius, K. Stenzel, H. Grandy, and W. Reif SecureMDD: a model-driven development method for secure smart card applications Proceedings of International Conference on Availability, Reliability and Security, 2009. ARES '09 2009 841 846 10.1109/ARES.2009.22
89. N. Moebius, K. Stenzel, and W. Reif Generating formal specifications for security-critical applications - a model-driven approach Proceedings of ICSE Workshop on Software Engineering for Secure Systems, SESS'09 2009 68 74 10.1109/IWSESS.2009.5068461
90. N. Moebius, K. Stenzel, W. Reif, Formal verification of application-specific security properties in a model-driven approach example: a copycard application in: Proceedings of International Symposium on Engineering Secure Software and Systems, 2010, pp. 166-181.
91. S. Moral-García, S. Moral-Rubio, E.B. Fernández, and E. Fernández-Medina Enterprise security pattern: a model-driven architecture instance Comput. Stand. Interfaces 36 4 2014 748 758
92. B. Morin, T. Mouelhi, F. Fleurey, Y. Le Traon, O. Barais, and J.-M. Jézéquel Security-driven model-based dynamic adaptation Proceedings of the IEEE/ACM International Conference on Automated software engineering, ASE'10 2010 ACM 205 214
93. T. Mouelhi, F. Fleurey, B. Baudry, and Y.L. Traon A model-based framework for security policy specification, deployment and testing Proceedings of International Conference on Model Driven Engineering Languages and Systems 2008 537 552
94. D. Mouheb, C. Talhi, A. Mourad, and V. Lima An aspect-oriented approach for software security hardening: from design to implementation Proceedings of Social Media Tourism Symposium, SoMeT 2009
95. D. Mouheb, C. Talhi, M. Nouh, V. Lima, M. Debbabi, L. Wang, and M. Pourzandi Aspect-oriented modeling for representing and integrating security concerns in uml Software Engineering Research, Management and Applications 2010 2010 Springer Berlin, Heidelberg 197 213
96. H. Mouratidis, and P. Giorgini Secure tropos: a security-oriented extension of the tropos methodology Int. J. Softw. Eng. Knowl. Eng. 17 2 2007 285 309
97. H. Mouratidis, J. Jürjens, and J. Fox Towards a comprehensive framework for secure systems development Proceedings of International Conference on Advanced Information Systems Engineering 2006 48 62
98. H. Mouratidis, A. Sunyaev, and J. Jürjens Secure information systems engineering: experiences and lessons learned from two health care projects Proceedings of International Conference on Advanced Information Systems Engineering 2009 231 245
99. Y. Nakamura, and M. Tatsubori Model-driven security based on a web services security architecture Proceedings of International Conference on Services Computing 2005
100. R. Neisse, and J. Doerr Model-based specification and refinement of usage control policies Proceedings of 2013 Eleventh Annual Conference on Privacy, Security and Trust 2013 169 176 10.1109/PST.2013.6596051
101. P.H. Nguyen, J. Klein, M. Kramer, and Y. Le Traon A systematic review of model driven security Proceedings of the 20th Asia-Pacific Software Engineering Conference, APSEC 2013
102. P.H. Nguyen, G. Nain, J. Klein, T. Mouelhi, and Y. Le Traon Model-driven adaptive delegation Proceedings of the 12th Annual International Conference on Aspect-Oriented Software Development, AOSD'13 2013 ACM New York, NY, USA 61 72 10.1145/2451436.2451445
103. P.H. Nguyen, G. Nain, J. Klein, T. Mouelhi, and Y. Le Traon Modularity and dynamic adaptation of flexibly secure systems: model-driven adaptive delegation in access control management Proceedings of Transactions on Aspect-Oriented Software Development XI 2014 Springer 109 144
104. T.J. Parr, and R.W. Quong ANTLR: a predicated-ll (k) parser generator Softw.: Pract. Exp. 25 7 1995 789 810
105. J. Pavlich-Mariscal, S. Demurjian, and L. Michel A framework of composable access control features: preserving separation of access control concerns from models to code Comput. Secur. 29 3 2010 350 379 10.1016/j.cose.2009.11.005
106. I. Ray, R. France, N. Li, and G. Georg An aspect-based approach to modeling access control concerns Inf. Softw. Technol. 46 9 2004 575 587 http://dx.doi.org/10.1016/j.infsof.2003.10.007
107. O. Sánchez, and F. Molina ModelSec: a generative architecture for model-driven security J. Univers. Comput. Sci. 15 15 2009 2957 2980
108. P. Sánchez, A. Moreira, and L. Fuentes Model-driven development for early aspects Inf. Softw. Technol. 52 3 2010 249 273
109. F. Satoh, Y. Nakamura, and K. Ono Adding authentication to model driven security Proceedings of International Conference on Web Services 2006. ICWS'06 2006 585 594 10.1109/ICWS.2006.25
110. F. Satoh, and Y. Yamaguchi Generic security policy transformation framework for WS-security Proceedings of IEEE International Conference on Web Services, ICWS (Icws) 2007 513 520 10.1109/ICWS.2007.92
111. S. Schefer-Wenzl, and M. Strembeck Model-driven specification and enforcement of RBAC break-glass policies for process-aware information systems Inf. Softw. Technol. 56 10 2014 1289 1308
112. M. Schnjakin, M. Menzel, and C. Meinel A pattern-driven security advisor for service-oriented architectures Proceedings of the 2009 ACM Workshop on Secure Web Services, SWS'09 2009 13 10.1145/1655121.1655126
113. D. Simmonds, A. Solberg, R. Reddy, R. France, and S. Ghosh An aspect oriented model driven framework Proceedings of 2005 Ninth IEEE International Enterprise Computing Conference, EDOC 2005 IEEE 119 130
114. K. Sohr, T. Mustafa, X. Bao, and G.-J. Ahn Enforcing role-based access control policies in web services with UML and OCL Proceedings of 2008 Annual Computer Security Applications Conference (ACSAC) 2008 257 266 10.1109/ACSAC.2008.35
115. E. Soler, J. Trujillo, C. Blanco, and E. Fernández-Medina Designing secure data warehouses by using MDA and QVT J. UCS 15 8 2009 1607 1641
116. E. Soler, J. Trujillo, E. Fernandez-Medina, and M. Piattini A framework for the development of secure data warehouses based on MDA and QVT Proceedings of the Second International Conference on Availability, Reliability and Security, ARES 2007 294 300 10.1109/ARES.2007.4
117. E. Soler, J. Trujillo, E. Fernandez-Medina, and M. Piattini A set of QVT relations to transform PIM to PSM in the design of secure data warehouses Proceedings of the Second International Conference on Availability, Reliability and Security, ARES 2007 644 654 10.1109/ARES.2007.27
118. E. Soler, J. Trujillo, E. Fernandez-Medina, and M. Piattini Application of QVT for the development of secure data warehouses: a case study Proceedings of the Second International Conference on Availability, Reliability and Security, ARES vol. 3 2007 829 836 10.1109/ARES.2007.39
119. J. Trujillo, E. Soler, E. Fernández-Medina, and M. Piattini A UML 2.0 profile to define security requirements for data warehouses Comput. Stand. Interfaces 31 5 2009 969 983 10.1016/j.csi.2008.09.040
120. J. Trujillo, E. Soler, E. Fernández-Medina, and M. Piattini An engineering process for developing secure data warehouses Inf. Softw. Technol. 51 6 2009 1033 1051 10.1016/j.infsof.2008.12.003
121. A.V. Uzunov, E.B. Fernandez, and K. Falkner Engineering security into distributed systems: a survey of methodologies J. Univers. Comput. Sci. 18 20 2012 2920 3006
122. B. Vela, and C. Blanco Model driven development of secure XML data warehouses: a case study Proceedings of the 2010 EDBT/ICDT Workshops 2010
123. B. Vela, C. Blanco, E. Fernández-Medina, and E. Marcos A practical application of our MDD approach for modeling secure XML data warehouses Decis. Support Syst. 52 4 2012 899 925 10.1016/j.dss.2011.11.008
124. B. Vela, E. Fernández-Medina, E. Marcos, and M. Piattini Model driven development of secure XML databases ACM SIGMOD Rec. 35 3 2006 22 27 10.1145/1168092.1168095
125. B. Vela, J.N. Mazón, C. Blanco, E. Fernández-medina, J. Trujillo, and E. Marcos Development of secure XML data warehouses with QVT Inf. Softw. Technol. 55 9 2013 1651 1677 10.1016/j.infsof.2013.03.003
126. R. Villarroel A UML 2.0/OCL extension for designing secure data warehouses J. Res. Pract. Inf. Technol. 38 1 2006 31 44
127. H. Wada, J. Suzuki, K. Oba A model-driven development framework for non-functional aspects in service oriented architecture Web Services Research for Emerging Applications: Discoveries and Trends: Discoveries and Trends 2010 358
128. C. Wohlin, and R. Prikladnicki Systematic literature reviews in software engineering Inf. Softw. Technol. 55 6 2013 919 920 http://dx.doi.org/10.1016/j.infsof.2013.02.002
129. C. Wolter, M. Menzel, and A. Schaad Model-driven business process security requirement specification J. Syst. Archit. 55 4 2009 211 223 10.1016/j.sysarc.2008.10.002
130. L. Xiao An adaptive security model using agent-oriented MDA Inf. Softw. Technol. 51 5 2009 933 955 10.1016/j.infsof.2008.05.005
131. Z.J. Zhu, and M. Zulkernine A model-based aspect-oriented framework for building intrusion-aware software systems Inf. Softw. Technol. 51 5 2009 865 875 10.1016/j.infsof.2008.05.007