@article {Nguyen:2015:INFSOF,
	title = {An Extensive Systematic Review on the Model-Driven Development of Secure Systems},
	journal = {Information and Software Technology},
	volume = {68},
	year = {2015},
	month = {12/2015},
	pages = {62-81},
	publisher = {Elsevier},
	abstract = {Context: Model-Driven Security (MDS) is as a specialised Model-Driven Engineering research area for supporting the development of secure systems. Over a decade of research on MDS has resulted in a large number of publications. Objective: To provide a detailed analysis of the state of the art in MDS, a systematic literature review (SLR) is essential. Method: We conducted an extensive SLR on MDS. Derived from our research questions, we designed a rigorous, extensive search and selection process to identify a set of primary MDS studies that is as complete as possible. Our three-pronged search process consists of automatic searching, manual searching, and snowballing. After discovering and considering more than thousand relevant papers, we identified, strictly selected, and reviewed 108 MDS publications. Results: The results of our SLR show the overall status of the key artefacts of MDS, and the identified primary MDS studies. E.g. regarding security modelling artefact, we found that developing domain- specific languages plays a key role in many MDS approaches. The current limitations in each MDS artefact are pointed out and corresponding potential research directions are suggested. Moreover, we categorise the identified primary MDS studies into 5 principal MDS studies, and other emerging or less common MDS studies. Finally, some trend analyses of MDS research are given. Conclusion: Our results suggest the need for addressing multiple security concerns more systematically and simultaneously, for tool chains supporting the MDS development cycle, and for more empirical studies on the application of MDS methodologies. To the best of our knowledge, this SLR is the first in the field of Software Engineering that combines a snowballing strategy with database searching. This combination has delivered an extensive literature study on MDS.\&nbsp;},
	keywords = {MDE, MDS, model transformations, model-driven engineering, model-drivensecurity, software security engineering, survey, systematicreview},
	isbn = {doi:10.1016/j.infsof.2015.08.006},
	doi = {http://dx.doi.org/10.1016/j.infsof.2015.08.006},
	url = {http://www.sciencedirect.com/science/article/pii/S0950584915001482},
	author = {Phu Hong {Nguyen} and Max E {Kramer} and Klein, Jacques and Le Traon, Yves}
}
@inproceedings {Nguyen:2015:MODELS,
	title = {SoSPa: A System of Security Design Patterns for Systematically Engineering Secure Systems},
	journal = {ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems (MODELS 2015)},
	year = {2015},
	month = {10/2015},
	pages = {246 - 255},
	publisher = {IEEE},
	abstract = {Model-Driven Security (MDS) for secure systems development still has limitations to be more applicable in practice. A recent systematic review of MDS shows that current MDS approaches have not dealt with multiple security concerns system- atically. Besides, catalogs of security patterns which can address multiple security concerns have not been applied efficiently. This paper presents an MDS approach based on a unified System of Security design Patterns (SoSPa). In SoSPa, security design patterns are collected, specified as reusable aspect models to form a coherent system of them that guides developers in systematically addressing multiple security concerns. SoSPa consists of not only interrelated security design patterns but also a refinement process towards their application. We applied SoSPa to design the security of crisis management systems. The result shows that multiple security concerns in the case study have been addressed by systematically integrating different security solutions.\&nbsp;},
	doi = {10.1109/MODELS.2015.7338255},
	url = {http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=7338255},
	author = {Phu Hong {Nguyen} and Yskout, Koen and Heyman, Thomas and Klein, Jacques and Scandariato, Riccardo and Le Traon, Yves}
}
@inbook {Nguyen:2014:BookChapter,
	title = {Advances in Model-Driven Security},
	booktitle = {Advances in Computer},
	volume = {93},
	year = {2014},
	month = {03/2014},
	pages = {103-152},
	publisher = {Elsevier},
	organization = {Elsevier},
	chapter = {Advances in Model-Driven Security},
	author = {Lucio, Levi and Zhang, Qin and Phu Hong {Nguyen} and Amrani, Moussa and Klein, Jacques and Vangheluwe, Hans and Le Traon, Yves},
	editor = {Hurson, Ali}
}
@inproceedings {Nguyen:2014:VAO,
	title = {Model-Driven Security with A System of Aspect-Oriented Security Design Patterns},
	journal = {The 2nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling},
	year = {2014},
	month = {07/2014},
	publisher = {ACM},
	address = {New York, NY, USA},
	abstract = {Model-Driven Security (MDS) has emerged for more than a decade to propose sound MD methodologies for supporting secure systems development. Yet, there is still a big gap before making Mds more easily applicable, and adoptable by industry. Most current MDS approaches have not extensively dealt with multiple security concerns but rather a specific one, e.g. authorization. Besides, security patterns which are based on domain-independent, time-proven security knowl- edge and expertise, can be considered as reusable security bricks upon which sound and secure systems can be built. But security patterns are not applied as much as they could be because developers have problems in selecting them and applying them in the right places, especially at the design phase. In this position paper, we propose an exploratory MDS approach based on a System of aspect-oriented Security design Patterns (shortly called SoSPa) in which security design patterns are collected, specified as reusable aspect models to form a coherent system of them that guides de- velopers in systematically selecting the right security design patterns for the job. Our MDS approach allows the selected security design patterns to be automatically composed with the target system model. The woven secure system model can then be used for (partial) code generation, including (configured) security infrastructures.},
	keywords = {aspect-oriented modeling, authentication, authorization, Model Composition, Model-Driven Security, security patterns},
	isbn = {978-1-4503-2900-2},
	doi = {10.1145/2631675.2631683},
	url = {http://doi.acm.org/10.1145/2631675.2631683},
	author = {Phu Hong {Nguyen} and Klein, Jacques and Le Traon, Yves}
}
@article {Nguyen:2014:TAOSD,
	title = {Modularity and Dynamic Adaptation of Flexibly Secure Systems: Model-Driven Adaptive Delegation in Access Control Management},
	journal = {Transactions on Aspect-Oriented Software Development},
	volume = {XI},
	year = {2014},
	pages = {109--144},
	publisher = {Springer},
	abstract = {Model-Driven Security (MDS) is a specialized Model-Driven Engineering (MDE) approach for supporting the development of secure systems. Model-Driven Security aims at improving the productivity of the development process and quality of the resulting secure systems, with models as the main artifact. Among the variety of models that have been studied in a Model-Driven Security perspective, one can mention access control models that specify the access rights. So far, these models mainly focus on static definitions of access control policies, without taking into account the more complex, but essential, delegation of rights mechanism. Delegation is a meta-level mechanism for administrating access rights, which allows a user without any specific administrative privileges to delegate his/her access rights to another user. This paper gives a formalization of access control and delegation mechanisms, and analyses the main hard-points for introducing various advanced delegation semantics in Model-Driven Security. Then, we propose a modular model-driven framework for 1) specifying access control, delegation and the business logic as separate concerns; 2) dynamically enforcing/weaving access control policies with various delegation features into security- critical systems; and 3) providing a flexibly dynamic adaptation strategy. We demonstrate the feasibility and effectiveness of our proposed solution through the proof-of-concept implementations of different component-based systems running on different adaptive execution platforms, i.e. OSGi and Kevoree.},
	author = {Phu Hong {Nguyen} and Nain, Gregory and Klein, Jacques and Mouelhi, Tejeddine and Le Traon, Yves}
}
@inproceedings {Nguyen:2013:AOSD,
	title = {Model-Driven Adaptive Delegation},
	journal = {the 12th annual International Conference on Aspect-Oriented Software Development},
	year = {2013},
	pages = {61--72},
	publisher = {ACM},
	keywords = {access control, delegation, dynamic adaptation, Model Composition, model-driven engineering, Model-Driven Security},
	isbn = {978-1-4503-1766-5},
	doi = {10.1145/2451436.2451445},
	url = {http://doi.acm.org/10.1145/2451436.2451445},
	author = {Phu Hong {Nguyen} and Nain, Gregory and Klein, Jacques and Mouelhi, Tejeddine and Le Traon, Yves}
}
@inproceedings {Nguyen:2013:APSEC,
	title = {A Systematic Review of Model-Driven Security},
	journal = {Software Engineering Conference (APSEC, 2013) 20th Asia-Pacific},
	volume = {1},
	year = {2013},
	month = {12/2013},
	pages = {432--441},
	publisher = {IEEE},
	author = {Phu Hong {Nguyen} and Klein, Jacques and Le Traon, Yves and Kramer, Max}
}
@misc {perrouin2012pairwise,
	title = {Pairwise testing for software product lines: comparison of two approaches},
	year = {2012},
	pages = {605{\textendash}643},
	publisher = {Springer US},
	author = {Perrouin, Gilles and Oster, Sebastian and Sen, Sagar and Klein, Jacques and Le Traon, Yves}
}
@misc {perrouin2010automated,
	title = {Automated and scalable t-wise test case generation strategies for software product lines},
	year = {2010},
	pages = {459{\textendash}468},
	publisher = {IEEE},
	author = {Perrouin, Gilles and Sen, Sagar and Klein, Jacques and Le Traon, Yves}
}
