Gestion contextualisée de la sécurité : implémentation MDS@Runtime avec FraSCAti

Wendpanga Francis Ouedraogo (1) , Frédérique Biennier (1) , Philippe Merle (2)

1 SOC - Service Oriented Computing
2 SPIRALS - Self-adaptation for distributed services and large software systems

The development of security policies for information systems is usually based on a systematic risks analysis, reducing them by adopting appropriate countermeasures. These risks analysis approaches are complex and designed for well-known and static environments. To overcome this limit, we propose to extend the Model Driven Security (MDS) approach to a MDS@Runtime vision to set a Security as a Service component. Plugged on the FraSCAti middleware, our security component selects, composes and orchestrates the security services depending on the execution context to avoid both under and over protection.

Mots clés: Cloud Computing; MDS@Runtime; SCA; SecaaS; FraSCAti

Mots clés: processus métiers

Domaines: Calcul parallèle, distribué et partagé [cs.DC]; Informatique [cs]

Wendpanga Francis Ouedraogo, Frédérique Biennier, Philippe Merle. Gestion contextualisée de la sécurité : implémentation MDS@Runtime avec FraSCAti. SAR-SSI 2014 - 9ème Conférence sur la Sécurité des Architectures Réseaux et des Systèmes d'Information, May 2014, Saint-Germain-Au-Mont-d'Or (Lyon), France. 10 p. ⟨hal-01088013⟩