Model-Driven Security Based on a Web Services Security Architecture

Authors:
Yuichi Nakamura;Michiaki Tatsubori;Takeshi Imamura;Koichi Ono
Affiliations:
IBM Tokyo Research Laboratory;IBM Tokyo Research Laboratory;IBM Tokyo Research Laboratory;IBM Tokyo Research Laboratory
Venue:
SCC '05 Proceedings of the 2005 IEEE International Conference on Services Computing - Volume 01
Year:
2005

Citing 0
Cited 9

Syntactic Validation of Web Services Security Policies

ICSOC '07 Proceedings of the 5th international conference on Service-Oriented Computing
Quality-Driven Business Policy Specification and Refinement for Service-Oriented Systems

ICSOC '08 Proceedings of the 6th International Conference on Service-Oriented Computing
Web Services-Based Security Requirement Elicitation

IEICE - Transactions on Information and Systems
The practical application of a process for eliciting and designing security in web service systems

Information and Software Technology
Metamodel for privacy policies within SOA

IWSESS '09 Proceedings of the 2009 ICSE Workshop on Software Engineering for Secure Systems
Multiagent Security Evaluation Framework for Service Oriented Architecture Systems

KES '09 Proceedings of the 13th International Conference on Knowledge-Based and Intelligent Information and Engineering Systems: Part I
Development and runtime support for situation-aware security in autonomic computing

ATC'06 Proceedings of the Third international conference on Autonomic and Trusted Computing
Augmented enterprise models as a foundation for generating security-related software: requirements and objectives

Proceedings of the Workshop on Model-Driven Security
Leveraging Early Aspects in End-to-End Model Driven Development for Non-Functional Properties in Service Oriented Architecture

Journal of Database Management

Quantified Score

Hi-index	0.00

Visualization

Abstract

The emergence of Web services and Service-Oriented Architecture (SOA) makes application development easy. However, since the computing environments on which applications are running are becoming complex, it is harder for users to set up security properly. Considering such complex security environments, this paper describes a tooling framework to generate Web services security configurations using Model Driven Architecture (MDA). According to the MDA concept, users simply add security intentions to an application model, and then detailed security configurations are generated, employing transformations over UML constructs and a security environment model. In order to demonstrate that the framework is practically useful, we also illustrate how to generate configuration files for a commercial product.