An automation framework design for secure software development

Abstract

Business process modeling (BPM) is procedural-oriented advanced activity for representing process models with domain knowledge. It consists of all the functional requirements given by the users to build the software. However, nonfunctional requirements such as cost, time, performance, and security are used to evaluate the performance of a system. Among these requirements, security is the vital attribute to be taken care at the early stage of any software development. For example, even governing bodies are heavily dependents on the data system due to security exposures. So automation on model transformation from non-secured metamodel to secured metamodels improves the overall execution of the software evolution process. In this paper, the authors propose an Auto Secure Business Process (AutoSBP) system to automate security to the existing software models. The activity model of existing system is dismantled into attributes and actions to extract its business need.Based on the interpretation from business data, security implications are applied to the existing software models. To fine tune the security implications, ID3 decision learning algorithm is applied. The effect of the system-generated model assures the quality by its complexity metrics.

Model Transformation and Code Generation Using a Secure Business Process Model

“…Security aspects are contained in these artifacts, which are automatically produced from the source business process model. Considering security as part of a model transformation is another approach proposed in [36].…”