An Aspect-Oriented Model Transformation to Weave Security using CVL

Jose-Miguel Horcas, Mónica Pinto, Lidia Fuentes

2014

Abstract

In this paper, we combine the Common Variability Language (CVL) and the ATL Transformation Language to customize and incorporate a generic security model into any application that requires security. Security spans a large set of concerns such as integrity, encryption or authentication, among others, and each concern needs to be incorporated into the base application in a different way and at different points of the application. We propose a set of weaving patterns using model transformations in ATL to automatically weave the security concerns with the base application in an aspect-oriented way. Since different applications require different security requirements, the security model needs to be customized before its incorporation into the application. We resolve the variability of the security properties and implement the weaving process in CVL. We use an e-voting case study to illustrate our proposal using the CVL approach.

References

  1. Ayora, C., Torres, V., Pelechano, V., and Alférez, G. H. (2012). Applying CVL to business process variability management. In Proceedings of the VARiability for You Workshop: Variability Modeling Made Useful for Everyone, VARY 7812, pages 26-31, New York, NY, USA. ACM.
  2. Combemale, B., Barais, O., Alam, O., and Kienzle, J. (2012). Using CVL to Operationalize Product Line Development with Reusable Aspect Models. In VARY@MoDELS'12: VARiability for You, Innsbruck, Autriche. ACM. VaryMDE (bilateral collaboration between Inria and Thales).
  3. Durn, F., Zschaler, S., and Troya, J. (2013). On the reusable specification of non-functional properties in DSLs. In Czarnecki, K. and Hedin, G., editors, Software Language Engineering, volume 7745 of Lecture Notes in Computer Science, pages 332-351. Springer Berlin Heidelberg.
  4. Georg, G., France, R., and Ray, I. (2002). An aspect-based approach to modeling security concerns. In Proceedings of the Workshop on Critical Systems Development with UML, pages 107-120.
  5. Haugen, O., Wa¸sowski, A., and Czarnecki, K. (2012). CVL: common variability language. In Proceedings of the 16th International Software Product Line Conference - Volume 2, SPLC 7812, pages 266-267, New York, NY, USA. ACM.
  6. Jouault, F., Allilaire, F., Bézivin, J., and Kurtev, I. (2008). ATL: A model transformation tool. Sci. Comput. Program., 72(1-2):31-39.
  7. Kolovos, D., Paige, R., and Polack, F. (2008). The epsilon transformation language. In Vallecillo, A., Gray, J., and Pierantonio, A., editors, Theory and Practice of Model Transformations, volume 5063 of Lecture Notes in Computer Science, pages 46-60. Springer Berlin Heidelberg.
  8. Pinto, M., Fuentes, L., Fernndez, L., and Valenzuela, J. (2009). Using AOSD and MDD to enhance the architectural design phase. In Meersman, R., Herrero, P., and Dillon, T., editors, On the Move to Meaningful Internet Systems: OTM 2009 Workshops, volume 5872 of Lecture Notes in Computer Science, pages 360-369. Springer Berlin Heidelberg.
  9. Rouillé, E., Combemale, B., Barais, O., Touzet, D., and Jézéquel, J.-M. (2012). Leveraging CVL to Manage Variability in Software Process Lines. In Asia-Pacific Software Engineering Conference, Hong Kong, Chine.
  10. Sijtema, M. (2010). Introducing variability rules in atl for managing variability in MDE-based product lines. Proc of MtATL, 10:39-49.
  11. Zhang, X., Haugen, O., and Moller-Pedersen, B. (2011). Model comparison to synthesize a model-driven software product line. In Software Product Line Conference (SPLC), 2011 15th International, pages 90-99.
Download


Paper Citation


in Harvard Style

Horcas J., Pinto M. and Fuentes L. (2014). An Aspect-Oriented Model Transformation to Weave Security using CVL . In Proceedings of the 2nd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD, ISBN 978-989-758-007-9, pages 138-147. DOI: 10.5220/0004890601380147


in Bibtex Style

@conference{modelsward14,
author={Jose-Miguel Horcas and Mónica Pinto and Lidia Fuentes},
title={An Aspect-Oriented Model Transformation to Weave Security using CVL},
booktitle={Proceedings of the 2nd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD,},
year={2014},
pages={138-147},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004890601380147},
isbn={978-989-758-007-9},
}


in EndNote Style

TY - CONF
JO - Proceedings of the 2nd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD,
TI - An Aspect-Oriented Model Transformation to Weave Security using CVL
SN - 978-989-758-007-9
AU - Horcas J.
AU - Pinto M.
AU - Fuentes L.
PY - 2014
SP - 138
EP - 147
DO - 10.5220/0004890601380147