Security architecture metamodel for Model Driven security

详细信息    查看全文

• 作者：Makhlouf Derdour^a ; ^{m.derdour@yahoo.fr" class="auth_mail" title="E-mail the corresponding author} ; Adel Alti^b ; ^{altiadel2002@yahoo.fr" class="auth_mail" title="E-mail the corresponding author} ; ^{alti.adel@univ-setif.dz" class="auth_mail" title="E-mail the corresponding author} ; Mohamed Gasmi^a ; ^{mohamed_gasmi@yahoo.fr" class="auth_mail" title="E-mail the corresponding author} ; Philippe Roose^c ; ^{Philippe.Roose@iutbayonne.univ-pau.fr" class="auth_mail" title="E-mail the corresponding author}
• 关键词：SMSA ; Security connector ; UML profile ; ADL ; OCL ; Vulnerability point&rsquo ; s detection architectures
• 刊名：Journal of Innovation in Digital Ecosystems
• 出版年：2015
• 出版时间：December 2015
• 年：2015
• 卷：2
• 期：1-2
• 页码：55-70
• 全文大小：4270 K

文摘

A key aspect of the design of any software system is its architecture. One issue for perpetually designing good and robust architectures is the new security concepts. Many new applications are running on powerful platforms that have ample rich architecture models to support multiples security techniques and to explicit several security constraints. The design of an architecture meta-model that considers security connectors is required in order to ensure a realistic secure assembly and to address the problems of vulnerability of exchanging data flow. Our research proposes a generic meta-modelling approach called SMSA (Security Meta-model for Software Architecture) for describing a software system as a collection of components that interact through security connectors. SMSA metamodel is modeled as a UML SMSA profile. We exploit UML powerful capacities (meta-models and models) to define security concepts of SMSA (e.g. security connectors, composite and domain). A major benefit of UML profile is to the faithful representation of connectors to support the definition of security connector types explicitly and to support them with the ability to associate semantic properties. We also provide a set of model transformations to fit security requirements of a system. These transformations are detailed and validated with phosphate support system (SAGE) for the company FERPHOS: a case study described in SMSA. The model is tested and validated with the semantic constraints defined by the profile using Eclipse 3.1 plug-in in this case study.