| Authors | P. H. Nguyen, J. Klein and Y. Le Traon |
| Title | Model-Driven Security with A System of Aspect-Oriented Security Design Patterns |
| Afilliation | Software Engineering, Software Engineering |
| Status | Published |
| Publication Type | Proceedings, refereed |
| Year of Publication | 2014 |
| Conference Name | The 2nd Workshop on View-Based, Aspect-Oriented and Orthographic Software Modelling |
| Date Published | 07/2014 |
| Publisher | ACM |
| Place Published | New York, NY, USA |
| ISBN Number | 978-1-4503-2900-2 |
| Keywords | aspect-oriented modeling, authentication, authorization, Model Composition, Model-Driven Security, security patterns |
| Abstract | Model-Driven Security (MDS) has emerged for more than a decade to propose sound MD methodologies for supporting secure systems development. Yet, there is still a big gap before making Mds more easily applicable, and adoptable by industry. Most current MDS approaches have not extensively dealt with multiple security concerns but rather a specific one, e.g. authorization. Besides, security patterns which are based on domain-independent, time-proven security knowl- edge and expertise, can be considered as reusable security bricks upon which sound and secure systems can be built. But security patterns are not applied as much as they could be because developers have problems in selecting them and applying them in the right places, especially at the design phase. In this position paper, we propose an exploratory MDS approach based on a System of aspect-oriented Security design Patterns (shortly called SoSPa) in which security design patterns are collected, specified as reusable aspect models to form a coherent system of them that guides de- velopers in systematically selecting the right security design patterns for the job. Our MDS approach allows the selected security design patterns to be automatically composed with the target system model. The woven secure system model can then be used for (partial) code generation, including (configured) security infrastructures. |
| URL | http://doi.acm.org/10.1145/2631675.2631683 |
| DOI | 10.1145/2631675.2631683 |
| Citation Key | Nguyen:2014:VAO |