Model-based Security Engineering of SOA System Using Security Intent DSL

Saleem, M. Q. and Jaafar, J. and Hassan, M.F. (2011) Model-based Security Engineering of SOA System Using Security Intent DSL. [Citation Index Journal]

[img] PDF - Published Version
Restricted to Registered users only


Official URL: http://www.sdiwc.net/ijncaa/index.php


Currently most of the enterprises are using SOA and web services technologies to build their web information system. They are using MDA principles for design and development of WIS and using UML as a modelling language for business process modelling. Along with the increased connectivity in SOA environment, security risks rise exponentially. Security is not defined during the early phases of development and left onto developer. Properly configuring security requirements in SOA applications is quite difficult for developers because they are not security experts. Furthermore SOA security is cross-domain and all required information are not available at downstream phases. Furthermore, business process expert; who is the actual stakeholder of the business process model is unable to specify security objectives due to lake of security modelling elements in a general purpose modelling languages like UML. As a result, business process expert either ignore the security intents in their model or indicate them in textual way. A security intents DSL is presented as a UML profile where security intents can be modelled as stereotypes on UML modelling elements during the business process modelling. Aim is to facilitate the business process expert in modelling the security requirements along the business process modelling. This security annotated business process model will facilitate the architectural team in specifying the concrete security implementation. As a proof of work we apply our approach to a typical on-line flight booking system business process.

Item Type:Citation Index Journal
Subjects:Q Science > QA Mathematics > QA76 Computer software
Departments / MOR / COE:Departments > Computer Information Sciences
ID Code:6393
Deposited By: Dr Jafreezal Jaafar
Deposited On:05 Sep 2011 00:38
Last Modified:19 Jan 2017 08:22

Repository Staff Only: item control page

Document Downloads

More statistics for this item...