An architecture for automatically developing secure OLAP applications from models

Abstract

Please cite this article as: C. Blanco, I.G. de Guzmán, E. Fernández-Medina, J. Trujillo, An architecture for automatically developing Secure OLAP applications from models, Information and Software Technology (2014), doi: http://dx.doi.org/10.1016/j.infsof. 2014.10.008 This is a PDF file of an unedited manuscript that has been accepted for publication. As a service to our customers we are providing this early version of the manuscript. The manuscript will undergo copyediting, typesetting, and review of the resulting proof before it is published in its final form. Please note that during the production process errors may be discovered which could affect the content, and all legal disclaimers that apply to the journal pertain. AbstractDecision makers query enterprise information stored in Data Warehouses (DW) by using tools (such as On-Line Analytical Processing (OLAP) tools) which use specific views or cubes from the corporate DW or Data Marts, based on the multidimensional modelling. Since the information managed is critical, security constraints have to be correctly established in order to avoid unauthorized accesses. In previous work we have defined a ModelDriven based approach for developing a secure DWs repository by following a relational approach. Nevertheless, is also important to define security constraints in the metadata layer that connects the DWs repository with the OLAP tools, that is, over the same multidimensional structures that final users manage. This paper incorporates a proposal to develop secure OLAP applications into our previous approach: improves a UML profile for conceptual modelling; defines a logical metamodel for OLAP applications; and * Corresponding author Email addresses: Carlos.Blanco@unican.es (Carlos Blanco), Ignacio.GRodriguez@uclm.es (Ignacio García-Rodríguez de Guzmán), Eduardo.Fdezmedina@uclm.es (Eduardo Fernández-Medina), jtrujillo@dlsi.ua.es (Juan Trujillo) Preprint submitted to Information and Software Technology November 4, 2014 defines and implements transformations from conceptual to logical models, and from logical models to the secure implementation into a specific OLAP tool (SQL Server Analysis Services).

The automatic creation of OLAP cube using an MDA approach

“…Nevertheless, in previous works done by Blanco et al, the authors provide a methodology for OLAP final code generation. The proposal focuses on both structural and security aspects.…”

“…In literature, the authors continued the approach of Soler et al by considering the OLAP layer and proposing a modeling solution based on the CWM metamodel in addition to generating the XML code for OLAP cube in SSAS platform. In fact, the proposal generates the .cube and .dim files as well as the .role file, which contain the main user permissions on cube and dimensions to insure the cube security.…”

Hierarchical network modeling with multidimensional information for aquatic safety management in the cold chain

“…Julien Aligon, Gallinucci, Golfarelli, Marcel, and Rizzi (2015) proposed a recommendation approach stemming from collaborative filtering for multidimensional cubes. Blanco, de Guzmán, Fernández-Medina, and Trujillo (2015) defined a model-driven approach for developing a secure DW repository by following a relational approach based on the multidimensional modeling. Do (2014) applied online analytical processing (OLAP) to a product data management (PDM) database to evaluate the performance of in-progress product development.…”

Active Categorization of Sensibility Degrees of Datawarehouse Established on User Visibilities

“… The circumspection of the Data Warehouse has traditionally been conceived in the authoritative carrying out of a Data Warehouse [16] [17], nevertheless the latest works [14] [18] believe its inclusion body in the growth levels which can develop more full-bodied lineament results, and the system can adapt these security demands in a more innate way.  In the explore work [5], the authors aimed an reflex MDA architecture established on the UML denotation to assure a Data Warehouse, but the doubtfulness that develops in this case is: What is the use of précising the protection level in the user visibility as well as for the elements of the Data Warehouse since the licenses are defined.…”

“… Most of the acts are modeling the access control founded on MAC and RBAC policies, while the user profile is believed a detached table that comprises the requirement data for a static access of a user without appreciating the antecedences of the user documented. An MDA computer architecture for a reflex secure conception of a Data Warehouse is applied in [14,13], but the two accesses were unable to realize the safety rules that are complex.  Although the permits present the main axis to en-sure secret access to the warehouse, however, the absence of a standard that supports the accuracy of these permissions can cause incompatibilities and illations as consequences.…”