Advances in Model-Driven Security

Levi, Lucio; Zhang, Qin; Nguyen, Phu H.; Amrani, Moussa; Klein, Jacques; Vangheluwe, Hans; Traon, Yves Le

doi:10.1016/b978-0-12-800162-2.00003-8

Cited by 28 publications

(14 citation statements)

References 89 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The book chapter [35] about model-driven security provides a detailed survey of a wide range of MDE approaches for designing secure systems, but does not cover the security of the MDE process itself.…”

Section: Model-driven Securitymentioning

confidence: 99%

Enforcing fine-grained access control for secure collaborative modelling using bidirectional transformations

et al. 2017

View full text Add to dashboard Cite

Large-scale model-driven system engineering projects are carried out collaboratively. Engineering artefacts stored in model repositories are developed in either offline (checkout-modify-commit) or online (GoogleDocstyle) scenarios. Complex systems frequently integrate models and components developed by different teams, vendors and suppliers. Thus, confidentiality and integrity of design artefacts need to be protected in accordance with access control policies. We propose a secure collaborative modelling approach where fine-grained access control for models is strictly enforced by bidirectional model transformations. Collaborators obtain filtered local copies of the model containing only those model elements which they are allowed to read; write access control policies are checked on the server upon submitting model changes. We present a formal collaboration schema which provenly guarantees certain correctness constraints, and its adaption to online scenarios with on-the-fly change propagation and the integration into existing version control systems to support offline scenarios. The approach is illustrated, and its scalability is evaluated using a case study of the MONDO EU project.

show abstract

Section: Model-driven Securitymentioning

confidence: 99%

Enforcing fine-grained access control for secure collaborative modelling using bidirectional transformations

et al. 2017

View full text Add to dashboard Cite

show abstract

“…As far as service-based business process implementation is concerned, these works have led to different frameworks such as OpenPMF [14] or SECTET [15] that take advantage of the Model Driven Security engineering [16] to generate security policies depending on the requirements associated to the business process model. Nevertheless, none of them support the full transformation process: While BPSec [17] is focused on the requirement engineering part, including CIM (Computation Independent Model) and PIM (Platform Independent Model) models, SECTET and OpenPMF provide PIM, PSM (Platform Specific Model) and code generation features.…”

Section: Context and State Of The Artmentioning

confidence: 99%

“…4. As stated in Section II, different works on Model Driven Security [16] have been conducted to integrate security annota- tions in the process model specification. Nevertheless, none of them support the full transformation process nor the integration of multiple and dynamic contexts.…”

Section: B Performance Evaluationmentioning

confidence: 99%

Optimizing Service Protection with Model Driven Security@run.time

Ouedraogo

Biennier

Merle

2015

2015 IEEE Symposium on Service-Oriented System Engineering

View full text Add to dashboard Cite

Enterprises are more and more involved in collaborative business. This leads to open and outsourcing all or part of their information system (IS) to create collaborative processes by composing business services picked in each partner IS and to take advantage of Cloud computing. Business services outsourcing and their dynamic collaboration context can bring lost of control on IS and new security risks can occur. This leads to inconsistent protection allowing competitors to access to unauthorized information. To address this issue, systematic security service invocations may be added, without paying attention to the business context leading to costly over protection. To address this issue, an adaptive security service model deployment is required to provide a business service consistent protection by taking into account the collaboration context (business service data criticity, partners involved in the collaboration, etc.), and the cloud deployment and execution environment. In this paper, we propose an adaptive security model based on MDS@run.time, the marriage of Model Driven Security (MDS) and Models@run.time approaches, allowing to select at runtime the appropriate security components to apply. The MDS approach is used to generate security policies, which are interpreted at runtime and load appropriate security mechanisms depending on the context (which takes advantage of the Models@run.time approach) ensuring business process end to end protection. A proof of concept prototype is built on top of the OW2 FraSCAti middleware, validating our proposition efficiency. Our experiments and simulations show that MDS@run.time improves the system efficiency when the over-protection risk rate increases.

show abstract

“…Other surveys and systematic reviews are conducted by Basin et al [197], Kasal et al [208], Nguyen et al [209], Jensen and Jaatun [210], and Lucio et al [211].…”

Section: General Methods To Deal With Securitymentioning

confidence: 99%

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Vasilevskaya¹

2015

View full text Add to dashboard Cite

Advances in Model-Driven Security

Cited by 28 publications

References 89 publications

Enforcing fine-grained access control for secure collaborative modelling using bidirectional transformations

Enforcing fine-grained access control for secure collaborative modelling using bidirectional transformations

Optimizing Service Protection with Model Driven Security@run.time

Security in Embedded Systems: A Model-Based Approach with Risk Metrics

Contact Info

Product

Resources

About