Model-based Specification and Validation of Security and Dependability Patterns

Brahim Hamid (1) , Christian Percebois (1)

1 IRIT-MACAO - Modèles, Architectures, Composants, Agilité et prOcessus

The requirement for higher Security and Dependability (S&D) of systems is continuously increasing, even in domains traditionally not deeply involved in such issues. In our work, we propose a modeling environment for pattern-based secure and dependable embedded system development by design. Here we study a general scheme for representing security and dependability (S&D) design patterns whose intention specification can be defined using a set of local properties. We propose an approach that associates Model Driven Engineering (MDE) and formal validation to get a common representation to specify patterns for several domains. The contribution of this work is twofold. On the one hand, we use model-based techniques to capture a set of artifacts to specify patterns. On the other hand, we introduce a set of artifacts for the formal validation of these patterns in order to guarantee their correctness. As an illustration of the approach, we study the authorization pattern.

Mots clés: Domain; Formalization; Model driven engineering; Security and Dependability; Pattern; Meta-model

Domaines: Génie logiciel [cs.SE]; Systèmes embarqués; Cryptographie et sécurité [cs.CR]; Interface homme-machine [cs.HC]; Architectures Matérielles [cs.AR]; Modélisation et simulation

Brahim Hamid, Christian Percebois. Model-based Specification and Validation of Security and Dependability Patterns. 6th International Symposium on Foundations & Practice of Security (FPS 2013), Oct 2013, La Rochelle, France. pp.65-82, ⟨10.1007/978-3-319-05302-8⟩. ⟨hal-01223182⟩