Model-Driven Security in Practice: An Industrial Experience

Abstract. In this paper we report on our experience on using the socalled model-driven security approach in an MDA industrial project. In model-driven security, "designers specify system models along with their security requirements and use tools to automatically generate system architectures from the models." Our report includes a discussion of the languages that we used to model both the functional and the security system's requirements, as well as a description of the transformation function that we developed to build from the security-design models the system's access control infrastructure. The report concludes with the lessons about the feasibility and practical industrial relevance of the model-driven security approach that we learned from this experience.

• Type: Conference
• Year: 2008
• Where: ECMDAFA
• Authors: Manuel Clavel, Viviane da Silva, Christiano Braga, Marina Egea
• Keywords: ECMDAFA 2008, Hardware, Model-driven Security, Model-driven Security Approach, Socalled Model-driven Security