Automatic Generation of Security Compliant (Virtual) Model Views

Salvador Martínez , Alexis Fouche , Sébastien Gerard (1) , Jordi Cabot (2)

1 LIST (CEA) - Laboratoire d'Intégration des Systèmes et des Technologies
2 ICREA - Institució Catalana de Recerca i Estudis Avançats = Catalan Institution for Research and Advanced Studies

The increased adoption of model-driven engineering in collaborative development scenarios raises new security concerns such as confidentiality and integrity. In a collaborative setting, the model, or fragments of it, should only be accessed and manipulated by authorized parties. Otherwise, important knowledge could be unintentionally leaked or shared artifacts corrupted. In this paper we explore the introduction of access-control mechanisms for models. Our approach relies on the definition of a domain specific language tailored to the definition of access-control rules on models and on its enforcement thanks to the automatic generation of security compliant (virtual) views.

Domaines: Informatique [cs]; Cryptographie et sécurité [cs.CR]

Salvador Martínez, Alexis Fouche, Sébastien Gerard, Jordi Cabot. Automatic Generation of Security Compliant (Virtual) Model Views. International Conference on Conceptual Modeling - ER 2018, Oct 2018, Xi'an, China. pp.109-117, ⟨10.1007/978-3-030-00847-5_10⟩. ⟨hal-02863658⟩