This paper proposes a concept of a distributed, hierarchical management structure for large interconnected, dynamic and heterogeneous infrastructures. This approach supporting has the potential to enable efficient security management as well as meta-data distribution is particularly relevant for applications relying on the so-called Internet of Things (IoT). The management structure is motivated by existing and successful approaches in peer-2-peer (P2P) networks for content distribution and it shares some of the characteristics. In contrast to P2P networks with clearly defined functional goals, the IoT can support various applications. Security management functionalities as well as other management tasks need to conform to the heterogeneity of applications and devices. Further, there is no single entity in control of the complete system and applications will definitely be cross-domain. Thus, a classical middle-ware is not suitable and a distributed approach as proposed in this paper can constitute the basis for a new management core for the IoT

Abstract-Security engineering is considered to be a challenging task in order to build systems that remain dependable in the face of malice, error, or mischance. Recent approaches propose the application of domain specific modeling languages (DSMLs) in order to facilitate security engineering activities. To support the development and application of adequate DSMLs, agile approaches and frameworks to provide appropriate tooling are needed. In this paper, we document our experiences developing modeling tools for two different DSMLs in the domain of security engineering. We sketch the language and implementation requirements for our modeling tools, design and implementation considerations, and report on pitfalls and remaining issues with regard to the development of modeling tools based on our experiences.