NDLI: A model-driven approach for securing software architectures

Content Provider	IEEE Xplore Digital Library
Author	Neri, Mario Arrigoni Guarnieri, Marco Magri, Eros Mutti, Simone Paraboschi, Stefano
Copyright Year	2013
Description	Author affiliation: Dip. di Ingegneria Informatica e Metodi Matematici, University of Bergamo, Bergamo, Italy (Neri, Mario Arrigoni; Mutti, Simone; Paraboschi, Stefano) \|\| Institute of Information Security, ETH Zürich, Zürich, Switzerland (Guarnieri, Marco) \|\| Comelit R & D, Comelit Group S.p.A, Rovetta S. Lorenzo, Italy (Magri, Eros)
Abstract	Current IT systems consist usually of several components and services that communicate and exchange data over the Internet. They have security requirements that aim at avoiding information disclosure and at showing compliance with government regulations. In order to effectively handle the security management of complex IT systems, techniques are needed to help the security administrator in the design and configuration of the security architecture. We propose a model-driven security approach for the design and generation of concrete security configurations for software architectures. In our approach the system architect models the architecture of the system by means of UML class diagrams, and then the security administrator adds security requirements to the model by means of Security4UML, a UML profile. From the model enriched with security requirements, the concrete security configuration is derived in a semi-automated way. We present a tool that supports this model-driven approach, and a case study that involves a distributed multi-user meeting scheduler application.
Starting Page	1
Ending Page	8
File Size	184525
Page Count	8
File Format	PDF
ISBN	9789897581311
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2013-07-29
Publisher Place	Iceland
Access Restriction	Subscribed
Rights Holder	SCITEPRESS
Subject Keyword	Authorization Analytical models Security Policy Unified modeling language Computer architecture Concrete Access Control Model-driven Security Software Architectures
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An Organization-Driven Approach for Enterprise Security Development and Management

Security in Model Driven Development: A Survey

Extending Model Driven Architecture with Software Security Assessment

Policy Description Language for Dynamic Access Control Models

Model Driven Validation of System Architectures

A Model-Driven Dependability Analysis Method for Component-Based Architectures

Model-Driven Development Meets Security: An Evaluation of Current Approaches

Towards Model Driven Architecture and Analysis of System of Systems Access Control

Reusable Formal Models for Secure Software Architectures

A model-driven approach for securing software architectures

Similar Documents

An Organization-Driven Approach for Enterprise Security Development and Management

Security in Model Driven Development: A Survey

Extending Model Driven Architecture with Software Security Assessment

Policy Description Language for Dynamic Access Control Models

Model Driven Validation of System Architectures

A Model-Driven Dependability Analysis Method for Component-Based Architectures

Model-Driven Development Meets Security: An Evaluation of Current Approaches

Towards Model Driven Architecture and Analysis of System of Systems Access Control

Reusable Formal Models for Secure Software Architectures

A model-driven approach for securing software architectures