A Model-Driven Methodology for Developing Secure Data-Management Applications

doi:10.1109/TSE.2013.2297116

Return

A Model-Driven Methodology for Developing Secure Data-Management Applications

2014-04-01

PRE

David Basin *

Manuel Clavel

Marina Egea

Miguel Angel García de Dios

Carolina Dania

DOI：10.1109/TSE.2013.2297116

Original

Original request for help

Save

Abstract

En 中文

We present a novel model-driven methodology for developing secure data-management applications. System developers proceed by modeling three different views of the desired application: its data model, security model, and GUI model. These models formalize respectively the application's data domain, authorization policy, and its graphical interface together with the application's behavior. Afterwards a model-transformation function lifts the policy specified by the security model to the GUI model. This allows a separation of concerns where behavior and security are specified separately, and subsequently combined to generate a security-aware GUI model. Finally, a code generator generates a multi-tier application, along with all support for access control, from the security-aware GUI model. We report on applications built using our approach and the associated tool.

Keywords:

Model-driven development

model-driven security

access control

GUI models

model transformation

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.