Multi Domain-Specific Modeling of the Security Concerns of Service-Oriented Architectures

Abstract

Abstract-Service-Oriented Architectures (SOA), and Web Services (WS), the technology generally used to implement them, achieve the integration of heterogeneous technologies, providing interoperability, and yielding the reutilization of preexistent systems. Model-driven development methodologies provide inherent benefits such as increased productivity, greater reuse, and better maintainability, to ñame a few. Efforts on achieving model-driven development of SOAs already exist, but there is currently no standard solution that addresses nonfunctional aspects of these services as well. This paper presents an approach to intégrate these non-functional aspects in the development of web services, with an emphasis on security.

An Aspect-Oriented Approach to Enforce Security Properties in Business Processes

“…In [9] the authors define an approach, which ensures the generation of security configurations from business process models. In the first step, the business process model is annotated with abstract security intents using different models and notations: like UML'S SOAML profile, UML's QoS profile, and secureUML.…”

Estrategia Guiada por Modelos para incluir Aspectos de Seguridad en Sistemas Empotrados Basados en Servicios Web

“…El proceso que se presenta, que extiende y detalla el presentado por primera vez en [Silva Gallino, J. P. and de Miguel, M. A. and Briones, J. F. and Alonso, A. (2011a)], hace uso de ontologías para el descubrimiento de modelos NF almacenados en repositorios.…”