An Aspect-Oriented Approach to Enforce Security Properties in Business Processes

作者: Inaya Yahya , Sameh Hbaieb Turki , Anis Charfi , Slim Kallel , Rafik Bouaziz

DOI: 10.1007/978-3-642-37804-1_35

关键词:

摘要: Security is an essential requirement for business processes. However, we observe that security mostly addressed at the technical implementation level and not design level. In a previous work motivated need to address already in process modeling. this paper, show how one could use Aspect-Oriented Programming (AOP) enforce requirements modular way. Starting from model where are expressed using profile mechanism generate AspectJ [1] code, which enforces those requirements. This generation based on set of Model-to-Text transformation rules. As typical example crosscutting concerns usage aspects allows implementation, separated properties.

参考文章(12)
Juan Pedro Silva Gallino, Miguel de Miguel, Javier F. Briones, Alejandro Alonso, Domain-Specific multi-modeling of security concerns in service-oriented architectures international conference on web services. pp. 128- 142 ,(2011) , 10.1007/978-3-642-29834-9_10
Gregor Kiczales, Erik Hilsdale, Jim Hugunin, Mik Kersten, Jeffrey Palm, William G. Griswold, An Overview of AspectJ ECOOP 2001 — Object-Oriented Programming. pp. 327- 354 ,(2001) , 10.1007/3-540-45337-7_18
Michael Menzel, Robert Warschofsky, Christoph Meinel, A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures international conference on web services. pp. 243- 250 ,(2010) , 10.1109/ICWS.2010.25
Ayman Chaâbane, Sameh Hbaieb Turki, Anis Charfi, Rafik Bouaziz, From platform independent service composition model in BPMN4SOA to executable service compositions Proceedings of the 12th International Conference on Information Integration and Web-based Applications & Services - iiWAS '10. pp. 653- 656 ,(2010) , 10.1145/1967486.1967588
A. RODRIGUEZ, E. FERNANDEZ-MEDINA, M. PIATTINI, A BPMN Extension for the Modeling of Security Requirements in Business Processes The IEICE transactions on information and systems. ,vol. 90, pp. 745- 752 ,(2007) , 10.1093/IETISY/E90-D.4.745
Anis Charfi, Sameh Hbaieb Turki, Ayman Chaâbane, Heiko Witteborg, Rafik Bouaziz, A model-driven approach to developing web service compositions based on BPMN4SOA International Journal of Reasoning-based Intelligent Systems. ,vol. 3, pp. 194- 204 ,(2011) , 10.1504/IJRIS.2011.043544
Juan Pedro Silva Gallino, Miguel de Miguel, Javier F. Briones, Alejandro Alonso, Multi Domain-Specific Modeling of the Security Concerns of Service-Oriented Architectures ieee international conference on services computing. pp. 761- 762 ,(2011) , 10.1109/SCC.2011.102
Y. Nakamura, M. Tatsubori, T. Imamura, K. Ono, Model-driven security based on a Web services security architecture ieee international conference on services computing. ,vol. 1, pp. 7- 15 ,(2005) , 10.1109/SCC.2005.66
Sameh Hbaieb Turki, Farah Bellaaj, Anis Charfi, Rafik Bouaziz, Modeling Security Requirements in Service Based Business Processes BMMDS/EMMSAD. pp. 76- 90 ,(2012) , 10.1007/978-3-642-31072-0_6