Modernizing Secure OLAP Applications with a Model-Driven Approach

Computer Journal

Volumn 58, Issue 10, 2014, Pages 2351-2367

  Blanco, Carlos ^a   Fernández Medina, Eduardo ^b   Trujillo, Juan ^c  

^a UNIVERSITY OF CANTABRIA   (Spain)

^b UNIVERSITY OF CASTILLA LA MANCHA   (Spain)

^c UNIVERSITY OF ALICANTE   (Spain)

Author keywords

confidentiality; data warehouses; model driven development; modernization; OLAP; reverse engineering; security

Indexed keywords

DATA WAREHOUSES; MODERNIZATION; REVERSE ENGINEERING; SOFTWARE DESIGN;

CONFIDENTIALITY; MODEL DRIVEN APPROACH; MODEL DRIVEN ARCHITECTURES; MODEL DRIVEN DEVELOPMENT; OLAP; ON-LINE ANALYTICAL PROCESSING; REVERSE ENGINEERING PROCESS; SECURITY;

SOFTWARE ARCHITECTURE;

EID: 84942645909     PISSN: 00104620     EISSN: 14602067     Source Type: Journal    
DOI: 10.1093/comjnl/bxu070     Document Type: Article

References (68)

1. Priebe, T. and Pernul, G. (2001) A Pragmatic Approach to Conceptual Modeling of OLAP Security. 20th Int. Conf. on Conceptual Modeling (ER 2001),Yokohama, Japan. Springer.
2. Weippl, E., Mangisengi, O., Essmayr, W., Lichtenberger, F. and Winiwarter, W. (2001) An Authorization Model for Data Warehouses and olap. Workshop on Security in Distributed Data Warehousing, New Orleans, Louisiana, USA.
3. Thuraisingham, B., Kantarcioglu, M. and Iyer, S. (2007) Extended rbac-based design and implementation for a secure data warehouse. Int. J. Bus. Intell. Data Mining, 2, 367-382.
4. Fernández-Medina, E., Jurjens, J., Trujillo, J. and Jajodia, S. (2009) Model-driven development for secure information systems. Inf. Softw. Technol., 51, 809-814.
5. Mouratidis, H. (2011) Software Engineering for Secure Systems: Industrial and Research Perspectives. IGI Global.
6. OMG(2003) Mda. model-driven architecture guide version 1. 0. 1. http://www. omg. org/cgi-bin/doc?omg/03-06-01.
7. Muller, H. A., Jahnke, J. H., Smith, D. B., Storey, M.-A., Tilley, S. R. and Wong, K. (2000) Reverse engineering: A road map. Proc. of the Conf. on the Future of Software Engineering (ICSE '00), pp. 47-60.
8. Canfora, G. and Penta, M. D. (2007) New Frontiers of Reverse Engineering. Future of Software Engineering. IEEE Computer Society, pp. 326-341.
9. Aiken, P. H. (1998) Reverse engineering of data. IBM Syst. J., 37, 246-269.
10. Blaha, M. (2001)ARetrospective on Industrial Database Reverse Engineering Projects-Part 1. Proc. 8thWorking Conf. on Reverse Engineering (WCRE01), Suttgart, Germany, pp. 136-147. IEEE Computer Society.
11. Cohen, Y. and Feldman, Y. A. (2003) Automatic high-quality reengineering of database programs by abstraction, transformation and reimplementation. ACM Trans. Softw. Eng. Methodol., 12, 285-316.
12. Hainaut, J.-L., Englebert, V., Henrard, J., Hick, J.-M. and Roland1, D. (2004) Database reverse engineering: From requirements to care tools. Appl. Categ. Struct., 3, pp. 9-45.
13. Fernández-Medina, E., Trujillo, J. and Piattini, M. (2007) Modeldriven multidimensional modeling of secure data warehouses. Eur. J. Inf. Syst., 16, 374-389.
14. Jurjens, J. (2004) Secure Systems Development with UML. Springer.
15. Jurjens, J. and Schmidt, H. (2011) Umlsec4uml2-Adopting UMLsec to Support UML2. Technical Report. Technical Reports in Computer Science. Technische Universitat Dortmund. http://hdl. handle. net/2003/27602.
16. Basin, D., Doser, J. and Lodderstedt, T. (2006) Model-driven security: from UML models to access control infrastructures. ACM Trans. Softw. Eng. Methodol., 15, 39-91.
17. Lodderstedt, T., Basin, D. and Doser, J. (2002) Secureuml: A UML-Based Modeling Language for Model-Driven Security. UML2002. The Unified Modeling Language. Model Engineering, Languages Concepts, and Tools. 5th International Conference, Dresden, Germany, pp. 426-441. Springer.
18. Best, B., Jurjens, J. and Nuseibeh, B. (2007) Model-Based Security Engineering of Distributed Information Systems Using UMLsec. Int. Conf. on Software Engineering, Minneapolis, MN, USA, pp. 581-590. IEEE.
19. Jurjens, J. and Shabalin, P. (2007) Tools for secure systems development with UML. Int. J. Softw. Tools Technol. Transf., 9, 527-544.
20. Matulevicius, R. and Dumas, M. (2011) Towards Model Transformation Between Secureuml and UMLsec for Role-Based Access Control. Proc. 2011 Conf. on Databases and Information Systems VI: Selected Papers fromthe 9th Int. Baltic Conf., DB&IS 2010, Amsterdam, The Netherlands, pp. 339-352. IOS Press.
21. Giorgini, P., Mouratidis, H. and Zannone, N. (2006) Modelling Security and Trust with Secure Tropos. Integrating Security and Software Engineering: Advances and Future Visions. Idea Group Publishing.
22. Massacci, F., Mylopoulos, J. and Zannone, N. (2007) Computeraided support for secure tropos. Autom. Softw. Eng., 14, 341-364.
23. Compagna, L., Khoury, P., Krausová, A., Massacci, F. and Zannone, N. (2009) How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns. Artif. Intell. Law, 17, 1-30.
24. van de Riet, R. (2008) Twenty-five years of mokum: for 25 years of data and knowledge engineering: Correctness by design in relation to mde and correct protocols in cyberspace. Data Knowl. Eng., 67, 293-329.
25. Nunes, F. J. B., Belchior, A. D. and Albuquerque, A. B. (2010) Security engineering approach to support software security. IEEE 6th World Congress on Services (SERVICES-1), pp. 48-55.
26. Paim, F. R. S. and Castro, J. (2003) Dwarf: an approach for requirements definition and management of data warehouse systems. 11th IEEE Int. Requirements Engineering Conf., 2003. Proceedings. pp. 75-84.
27. Sapia, C., Blaschka, M., Hofling, G. and Dinter, B. (1998) Extending the e/r model for the multidimensional paradigm. 1st Int. Workshop on DataWarehouse and Data Mining (DWDM'98), Singapore, pp. 105-116. Springer. 11th IEEE Int. Requirements Engineering Conf., 2003. Proceedings. pp. 75-84
28. Tryfona, N., Busborg, F. and Christiansen, J. (1999) Starer: A Conceptual Model for Data Warehouse Design. ACM 2nd Int. Workshop on Data Warehousing and OLAP (DOLAP'99), Missouri, USA, pp. 3-8. ACM.
29. Binh, N. T., Tjoa, A. M. andWagner, R. (2000)An object-oriented multidimensional data model for olap. In Proc. of 1st Int. Conf. on Web-Age Information Management (WAIM). LNCS 1846. pp. 69-82.
30. Abelló, A., Samos, J. and Saltor, F. (2006) Yam2: A multidimensional conceptual model extending uml. Inf. Syst., 31, 668-677.
31. Golfarelli, M. and Rizzi, S. (2009) Data Warehouse Design: Modern Principles and Methodologies. McGraw-Hill Osborne Media.
32. OMG(2003) Cwm. common warehouse metamodel. version v1. 1. http://www. omg. org/spec/CWM/1. 1.
33. Kirkgoze, R., Katic, N., Stolda, M. and Min Tjoa, A. (1997) A Security Concept for olap. 8th Int. Workshop on Database and Expert System Applications (DEXA'97), Toulouse, France, pp. 619-626. IEEE Computer Society.
34. Liu, Y., Sung, S. and Xiong, H. (2006) A cubic-wise balance approach for privacy preservation in data cubes. Inf. Sci., 176, 1215-1240.
35. Sung, Y., Liu, Y., Xiong, H. and A. Xg, P. (2006) Privacy preservation for data cubes. Knowl. Inf. Syst., 9, 38-61.
36. Henrard, J. and Hainaut, J.-L. (2001) Data dependency elicitation in database reverse engineering. CSMR '01 Proc. of the Fifth European Conf. on Software Maintenance and Reengineering, pp. 11-19.
37. Hainaut, J.-L., Henrard, J., Ronald, D. and Englebert, V. (1996) Database design recovery. CAiSE, pp. 272-300.
38. Soutou, C. (1998) Relational database reverse engineering: Algorithms to extract cardinality constraints. Data Knowl. Eng., 28, 161-207.
39. Sousa, P., Pedro-de Jesus, L., Pereira, G. and Brito e Abreu, F. (2002) Clustering relations into abstract er schemas for database reverse engineering. Sci. Comput. Program, 45, 137-153.
40. Behm,A., Geppert, A. and Dittrich, K. (2000) Algebraic database migration to object technology. ER'00 Proc. of the 19th int. conf. on Conceptual modeling, pp. 440-453.
41. McBrien, P. and Poulovassilis, A. (1999) Automatic migration and wrapping of database applications-a schema transformation approach. ER '99 Proc. of the 18th Int. Conf. on Conceptual Modeling, pp. 93-113.
42. Polo, M., García Rodríguez de Guzmán, I. and Piattini, M. (2007) An mda-based approach for database re-engineering. J. Softw. Maintance Evol., 19, 383-417.
43. Polo, M., Gómez, J., Piattini, M. and Ruiz, F. (2002) Generating three-tier applications from relational databases: a formal and practical approach. Inf. Softw. Technol., 44, 923-941.
44. Blanco, C., de Guzmán, I. G. R., Fernández-Medina, E. and Trujillo, J. (2014) Showing the benefits of applying a modeldriven architecture for developing secure olap applications. J. UCS, 20, 79-106.
45. Trujillo, J., Soler, E., Fernández-Medina, E. and Piattini, M. (2009) A uml 2. 0 profile to define security requirements for data warehouses. Comput. Stand. Interfaces, 31, 969-983.
46. Yu, E. (1997) Towards Modelling and Reasoning Support for Early-Phase Requirements Engineering. 3rd IEEE International Symposium on Requirements Engineering (RE'97),Washington, DC, pp. 226-235. IEEE.
47. Fernández-Medina, E., Trujillo, J., Villarroel, R. and Piattini, M. (2006) Access control and audit model for the multidimensional modeling of data warehouses. Decis. Support Syst., 42, 1270-1289.
48. Blanco, C., García Rodríguez de Guzmán, I., Fernández-Medina, E., Trujillo, J. and Piattini, M. (2010) Defining and transforming security rules in an mda approach for dws. Int. J. Bus. Intell. Data Mining, 5, 116-133.
49. Blanco, C., García-Rodríguez de Guzmán, I., G. Rosado, D., Fernández-Medina, E. and Trujillo, J. (2009) Applying qvt in order to implement secure data warehouses in sql server analysis services. J. Res. Practice Inf. Technol., 41, 135-154.
50. Trujillo, J., Soler, E., Fernández-Medina, E. and Piattini, M. (2009) An engineering process for developing secure data warehouses. Inf. Softw. Technol., 51, 1033-1051.
51. Bézivin, J. (2004) In search of a basic principle for model-driven engineering. Upgrade, 5, 21-24.
52. Mellor, Clark, and Futugami (2003) Model-driven development- guest editor's introduction. IEEE Softw., 20, 14-18.
53. Vela, B., Fernandez-Medina, E., Marcos, E. and Piattini, M. (2006) Model-driven development of secure xml databases. ACM Sigmod Record, 35, 22-27.
54. Li, B., Liu, S. and Yu, Z. (2005) Applying mda in Traditional Database-Based Application Development. Int. Conf. on Computer Supported Cooperative Work in Design, Coventry, UK, pp. 1038-1041. IEEE.
55. Dubielewicz, I., Hnatkowska, B., Huzar, Z. and Tuzinkiewicz, L. (2007) Evaluation of mda-psm Database Model Quality in the Context of Selected Non-Functional Requirements. Int. Conf. on Dependability of Computer Systems, Szklarska Poreba, Poland, pp. 19-26. IEEE.
56. Vara, J., Vela, B., Cavero, J. and Marcos, E. (2007) Model Transformation for Object-Relational Database Development. ACM Symposium on Applied Computing, Seoul, Korea, pp. 1012-1019. ACM.
57. Mazón, J.-N. and Trujillo, J. (2008) An mda approach for the development of data warehouses. Decis. Support Syst., 45, 41-58.
58. Vela, B., Mazón, J., Blanco, C., Fernández-Medina, E., Trujillo, J., and Marcos, E. (2013)Automatic generation of secure xml data warehouses by using qvt within an mda framework. Inf. Softw. Technol., 55.
59. Fernandes, L., Neto, B., Fagundes, V., Zimbrao, G., de Souza, J. and Salvador, R. (2010) Model-driven architecture approach for data warehouse. 6th Int. Conf. on Autonomic and Autonomous Systems (ICAS), pp. 156-161.
60. Meliá, S. and Gomez, J. (2006) The websa approach: applying model-driven engineering to web applications. J. Web Eng., 5, 121-149.
61. Tan, W., Ma, L., Li, J. and Xiao, Z. (2006) Application mda in a Conception Design Environment. Int. Multi-Symposiums on Computer and Computational Sciences, Hangzhou, China, pp. 702-704. IEEE Computer Society.
62. Yu, B., Zhang, C. and Zhao, Y. (2006) Transform from Models to Service Description Based on mda. Asia-Pacific Conference on Services Computing, GuangZhou, China, pp. 605-608. IEEE.
63. Kraus, A., Knapp, A. and Koch, N. (2007) Model-Driven Generation ofWeb Applications in uwe. InternationalWorkshop on Model-Driven Web Engineering, Como, Italy.
64. Braganca, A. and Machado, R. (2007) Model-Driven Development of Software Product Lines. Int. Conf. on the Quality of Information and Communications Technology, Lisbon, Portugal, pp. 199-203. IEEE.
65. Moebius, N., Stenzel, K. and Reif,W. (2009) Generating formal specifications for security-critical applications-a model-driven approach.
66. Cuccuru, A., De Simone, R., Saunier, T., Siegel, G. and Sorel, Y. (2005) P2i: An Innovative mda Methodology for Embedded Real-Time Systems. Euromicro Conference on Digital System Design, Porto, Portugal, pp. 26-33. IEEE.
67. Lu, S., Halang, W. A. and Zhang, L. (2005) A Component-Based uml Profile to Model Embedded Real-Time Systems Designed by the mda Approach. Int. Conf. on Embedded and Real-Time Computing Systems and Applications, Hong Kong, China, pp. 563-566. IEEE.
68. Wang,Y., Zhou, X., Liang, L. and Peng, C. (2006) A mda-Based Soc Modeling Approach Using UML and SystemC. Int. Conf. on Computer and Information Technology, Baridhara, Bangladesh, pp. 245-251. IEEE.