Paper published in a book (Scientific congresses, symposiums and conference proceedings)
Model-Driven Security with A System of Aspect-Oriented Security Design Patterns
Nguyen, Phu Hong; Klein, Jacques; Le Traon, Yves
2014In 2nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling
Peer reviewed
 

Files


Full Text
VAO2014-SoSPa-CameraReady.pdf
Author preprint (417.31 kB)
Request a copy

All documents in ORBilu are protected by a user license.

Send to



Details



Keywords :
Model-driven security; aspect-oriented modeling; security patterns
Abstract :
[en] Model-Driven Security (MDS) has emerged for more than a decade, as a specialization of Model-Driven Engineering (MDE), to propose sound MD methodologies for supporting secure systems development. Yet, there is still a big gap before making MDS approaches more easily applicable and adoptable by industry. Most current MDS approaches only deal with a specific security concern, e.g. Authorization, and have not taken into account multiple security concerns. Besides, security patterns which are based on domain-independent, time-proven security knowledge and expertise, can be considered as reusable security bricks upon which sound and secure systems can be built. But they are not applied as much as they could be, because developers have problems in selecting them and applying them in the right places, especially at the design phase. In this position paper, we propose an exploratory MDS approach based on a System of aspect-oriented Security design Patterns (SoSPa) in which security design patterns are collected, specified as reusable aspect models to form a coherent system of them that guides developers in systematically selecting the right security design patterns for the job. Our MDS approach allows the selected security design patterns to be automatically composed with the target system model. The woven secure system model can then be used for code generation, including configured security infrastructures.
Research center :
SnT
Disciplines :
Computer science
Author, co-author :
Nguyen, Phu Hong ;  University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT)
Klein, Jacques ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Le Traon, Yves ;  University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC)
Language :
English
Title :
Model-Driven Security with A System of Aspect-Oriented Security Design Patterns
Publication date :
22 July 2014
Event name :
2nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling
Event organizer :
University of York
Event place :
York, United Kingdom
Event date :
22-07-2014
Audience :
International
Main work title :
2nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling
Peer reviewed :
Peer reviewed
Name of the research project :
I2R-SER-PFN-10MITE > MITER: Modeling, Composing and Testing of Security Concerns > 01/01/2011 - 31/12/2013 > LE TRAON Yves
Funders :
FNR - Fonds National de la Recherche [LU]
Available on ORBilu :
since 29 August 2014

Statistics


Number of views
109 (1 by Unilu)
Number of downloads
0 (0 by Unilu)

Scopus citations®
 
6
Scopus citations®
without self-citations
5
OpenCitations
 
8

Bibliography


Similar publications



Contact ORBilu