@article {Nguyen:2015:INFSOF,
	title = {An Extensive Systematic Review on the Model-Driven Development of Secure Systems},
	journal = {Information and Software Technology},
	volume = {68},
	year = {2015},
	month = {12/2015},
	pages = {62-81},
	publisher = {Elsevier},
	abstract = {Context: Model-Driven Security (MDS) is as a specialised Model-Driven Engineering research area for supporting the development of secure systems. Over a decade of research on MDS has resulted in a large number of publications. Objective: To provide a detailed analysis of the state of the art in MDS, a systematic literature review (SLR) is essential. Method: We conducted an extensive SLR on MDS. Derived from our research questions, we designed a rigorous, extensive search and selection process to identify a set of primary MDS studies that is as complete as possible. Our three-pronged search process consists of automatic searching, manual searching, and snowballing. After discovering and considering more than thousand relevant papers, we identified, strictly selected, and reviewed 108 MDS publications. Results: The results of our SLR show the overall status of the key artefacts of MDS, and the identified primary MDS studies. E.g. regarding security modelling artefact, we found that developing domain- specific languages plays a key role in many MDS approaches. The current limitations in each MDS artefact are pointed out and corresponding potential research directions are suggested. Moreover, we categorise the identified primary MDS studies into 5 principal MDS studies, and other emerging or less common MDS studies. Finally, some trend analyses of MDS research are given. Conclusion: Our results suggest the need for addressing multiple security concerns more systematically and simultaneously, for tool chains supporting the MDS development cycle, and for more empirical studies on the application of MDS methodologies. To the best of our knowledge, this SLR is the first in the field of Software Engineering that combines a snowballing strategy with database searching. This combination has delivered an extensive literature study on MDS.\&nbsp;},
	keywords = {MDE, MDS, model transformations, model-driven engineering, model-drivensecurity, software security engineering, survey, systematicreview},
	isbn = {doi:10.1016/j.infsof.2015.08.006},
	doi = {http://dx.doi.org/10.1016/j.infsof.2015.08.006},
	url = {http://www.sciencedirect.com/science/article/pii/S0950584915001482},
	author = {Phu Hong {Nguyen} and Max E {Kramer} and Klein, Jacques and Le Traon, Yves}
}
@phdthesis {24601,
	title = {Model-Driven Security With Modularity and Reusability For Engineering Secure Software Systems},
	volume = {PhD},
	year = {2015},
	month = {09/2015},
	pages = {213},
	school = {University of Luxembourg},
	type = {phdPhD},
	address = {Luxembourg},
	abstract = {Context: The more human beings depend on software systems, the more important role that software security engineering must play to build secure software systems. Model-Driven Security (MDS) emerged more than a decade ago as a specialised Model-Driven Engineering (MDE) research area for engineering secure software systems. MDS is promising but not mature yet. Our recent systematic literature review (SLR) has revealed several current limitations and open issues in the state of the art of MDS research.\&nbsp;Objectives: This PhD work aims at addressing three of the main open issues in the current state of the art of MDS research that are pointed out by the SLR. First, our SLR shows that multiple security concerns need to be handled together more systematically. Second, true Aspect-Oriented Modelling techniques for better ensuring the separation- of-concern in MDS approaches could have been leveraged more extensively. Third, complete tool chains based on integrated MDE techniques covering all the main stages of the development cycle are emerging, but still very rare.\&nbsp;Methods: On one hand, we develop a full MDS framework with modularity based on domain-specific modelling, model transformations, and model-based security testing. This MDS framework can help us to deal with complex delegation mechanisms in access control administration, from modelling till testing. On the other hand, we propose a highly modular, reusable MDS solution based on a System of Security design Patterns (SoSPa) and reusable aspect models to tackle multiple security concerns systematically.\&nbsp;Results: First, an extensive SLR has been conducted for revealing and analysing the current state of the art of MDS research. Second, a full MDS framework focusing on modularity has been proposed that integrates domain-specific modelling, model transformations, and model-based security testing to support all the main stages of an MDS development cycle. Third, we have developed a highly reusable, modular MDS approach based on a System of Security design Patterns for handling multiple security concerns together systematically. Finally, we have showed how our MDS approaches can be integrated in a full MDS framework, called MDS-MoRe, which could be the basis of a complete tool chain for MDS development of secure systems.\&nbsp;Conclusion: In this thesis, integrated MDS methodologies with modularity and reusability have been proposed for engineering secure software systems. This work has tackled three main current open issues in MDS research revealed from an extensive SLR.},
	keywords = {Aspect-Oriented Modelling, DSL, MDE, MDS, Model Composition, model transformations, Model-Driven Security, Pattern Refinement, RAM, Security By Design, Security Design Patterns, Security Testing, Systematic Review},
	url = {http://hdl.handle.net/10993/22768},
	author = {Phu Hong {Nguyen}}
}
