Security modeling of SOA system using security intent DSL

Saleem, M. Q. and Jaafar, J. and Hassan, M.F. (2011) Security modeling of SOA system using security intent DSL. Communications in Computer and Information Science, 181 CC (PART 3). pp. 176-190. ISSN 18650929

[img] PDF
Restricted to Registered users only


Official URL: http://www.springerlink.com/content/k3211g2g369651...


Currently most of the enterprises are using SOA and Web Services technologies to build their web information system. MDA principles are used to develop web service and they used UML as a modelling language for business process modelling. Along with the increased connectivity in SOA environment, security risks rise exponentially. Security is not defined during the early phases of development and left onto developer. Properly configuring security requirements in SOA applications is quite difficult for developers because they are not security experts. Furthermore SOA security is cross-domain and all required information are not available at downstream phases. General purpose modelling language like UML lacks the model elements to define the security requirements of the business processes. As a result, business process expert either ignore the security intents in their model or indicate them in textual way. A security intents DSL is presented as a UML profile where security intents can be modelled as stereotypes on UML modelling elements during the business process modelling. Aim is to facilitate the business process expert in modelling the security requirements along the business process modelling. This security annotated business process model will facilitate the security expert in specifying the concrete security implementation. As a proof of work we apply our approach to a typical on-line flight booking system business process. © 2011 Springer-Verlag.

Item Type:Article
Subjects:Q Science > QA Mathematics > QA76 Computer software
Departments / MOR / COE:Departments > Computer Information Sciences
ID Code:6487
Deposited By: Dr Jafreezal Jaafar
Deposited On:05 Oct 2011 00:24
Last Modified:19 Jan 2017 08:23

Repository Staff Only: item control page

Document Downloads

More statistics for this item...