@article {Nguyen:2015:INFSOF,
	title = {An Extensive Systematic Review on the Model-Driven Development of Secure Systems},
	journal = {Information and Software Technology},
	volume = {68},
	year = {2015},
	month = {12/2015},
	pages = {62-81},
	publisher = {Elsevier},
	abstract = {Context: Model-Driven Security (MDS) is as a specialised Model-Driven Engineering research area for supporting the development of secure systems. Over a decade of research on MDS has resulted in a large number of publications. Objective: To provide a detailed analysis of the state of the art in MDS, a systematic literature review (SLR) is essential. Method: We conducted an extensive SLR on MDS. Derived from our research questions, we designed a rigorous, extensive search and selection process to identify a set of primary MDS studies that is as complete as possible. Our three-pronged search process consists of automatic searching, manual searching, and snowballing. After discovering and considering more than thousand relevant papers, we identified, strictly selected, and reviewed 108 MDS publications. Results: The results of our SLR show the overall status of the key artefacts of MDS, and the identified primary MDS studies. E.g. regarding security modelling artefact, we found that developing domain- specific languages plays a key role in many MDS approaches. The current limitations in each MDS artefact are pointed out and corresponding potential research directions are suggested. Moreover, we categorise the identified primary MDS studies into 5 principal MDS studies, and other emerging or less common MDS studies. Finally, some trend analyses of MDS research are given. Conclusion: Our results suggest the need for addressing multiple security concerns more systematically and simultaneously, for tool chains supporting the MDS development cycle, and for more empirical studies on the application of MDS methodologies. To the best of our knowledge, this SLR is the first in the field of Software Engineering that combines a snowballing strategy with database searching. This combination has delivered an extensive literature study on MDS.\&nbsp;},
	keywords = {MDE, MDS, model transformations, model-driven engineering, model-drivensecurity, software security engineering, survey, systematicreview},
	isbn = {doi:10.1016/j.infsof.2015.08.006},
	doi = {http://dx.doi.org/10.1016/j.infsof.2015.08.006},
	url = {http://www.sciencedirect.com/science/article/pii/S0950584915001482},
	author = {Phu Hong {Nguyen} and Max E {Kramer} and Klein, Jacques and Le Traon, Yves}
}
@inproceedings {Nguyen:2013:AOSD,
	title = {Model-Driven Adaptive Delegation},
	journal = {the 12th annual International Conference on Aspect-Oriented Software Development},
	year = {2013},
	pages = {61--72},
	publisher = {ACM},
	keywords = {access control, delegation, dynamic adaptation, Model Composition, model-driven engineering, Model-Driven Security},
	isbn = {978-1-4503-1766-5},
	doi = {10.1145/2451436.2451445},
	url = {http://doi.acm.org/10.1145/2451436.2451445},
	author = {Phu Hong {Nguyen} and Nain, Gregory and Klein, Jacques and Mouelhi, Tejeddine and Le Traon, Yves}
}
@inproceedings {Nguyen:2013:Mutation,
	title = {Testing Delegation Policy Enforcement via Mutation Analsysis},
	journal = {Software Testing, Verification and Validation Workshops (ICSTW), 2013 IEEE Sixth International Conference on},
	year = {2013},
	month = {03/2013},
	pages = {34-42},
	publisher = {IEEE},
	keywords = {access control, delegation, dynamic adaptation, Model Composition, model-driven engineering, Model-Driven Security},
	isbn = {978-1-4799-1324-4},
	doi = {10.1109/ICSTW.2013.12},
	url = {http://dx.doi.org/10.1109/ICSTW.2013.12},
	author = {Phu Hong {Nguyen} and Papadakis, Mike and Rubab, Iram}
}
