Hoisl, Bernhard. 2012. Modeling and Enforcing Secure Object Flows in Process-driven SOAs: An Integrated Model-driven Approach. OCG Arbeitskreis IT-Sicherheit: 2nd Young Researcher's Day, Vienna, Österreich, 29.11..
BibTeX
Abstract
This talk presents an integrated model-driven approach for the specification and the enforcement of secure object flows in process-driven service-oriented architectures (SOA). In this context, a secure object flow ensures the confidentiality and the integrity of important objects (such as business contracts or electronic patient records) that are passed between different participants in SOA-based business processes. A formal and generic metamodel for secure object flows is specified that can be used to extend arbitrary process modeling languages. To demonstrate the approach, a UML extension for secure object flows is presented. Moreover, it is described how platform-independent models are mapped to platform-specific software artifacts via automated model transformations. In addition, we describe the integration of the approach with the Eclipse modeling framework and give a short tool demonstration.
Tags
Press 'enter' for creating the tagPublication's profile
Status of publication | Published |
---|---|
Affiliation | WU |
Type of publication | Paper presented at an academic conference or symposium |
Language | German |
Title | Modeling and Enforcing Secure Object Flows in Process-driven SOAs: An Integrated Model-driven Approach |
Event | OCG Arbeitskreis IT-Sicherheit: 2nd Young Researcher's Day |
Year | 2012 |
Date | 29.11. |
Country | Austria |
Location | Vienna |
URL | http://www.ocg.at/young-researchers-day-2012 |
Associations
- Projects
- Domain-Specific Languages for Model-Driven Security Engineering
- People
- Hoisl, Bernhard (Former researcher)
- Organization
- Institute for Information Systems and New Media IN (Details)
- Research areas (ÖSTAT Classification 'Statistik Austria')
- 1108 Informatics (Details)
- 1140 Software engineering (Details)
- 1147 IT security (Details)
- 5367 Management information systems (Details)