Towards the integration of security patterns in UML Component-based Applications

Anas Motii (1) , Brahim Hamid (2) , Agnes Lanusse (1) , Jean-Michel Bruel (2)

1 DILS (CEA, LIST) - Département Ingénierie Logiciels et Systèmes
2 IRIT-MACAO - Modèles, Architectures, Composants, Agilité et prOcessus

In software engineering, design patterns are considered effective tools for the reuse of specific information. They are widely used today to provide architects and designers with reusable design knowledge. This paper is about the use of patterns in secure systems and software engineering, in particular in model based engineering. In this paper, we are proposing a model-based methodology for security pattern integration aimed to secure component-based software system architectures in UML. The methodology is based on merging techniques and verifications against integration constraints described in OCL language. The paper illustrates the method through a VPN security pattern.

Mots clés: pattern integration; secure architecture; model-based methodology; model driven engineering; UML; OCL; security patterns

Domaines: Informatique [cs]

Anas Motii, Brahim Hamid, Agnes Lanusse, Jean-Michel Bruel. Towards the integration of security patterns in UML Component-based Applications. Joint Proceedings of the Second International Workshop on Patterns in Model Engineering and the Fifth International Workshop on the Verification of Model Transformation, {PAME/VOLT} 2016, co-located with {ACM/IEEE}19th International Conference on Model Driven Engineering Languages and Systems (MoDELS 2016), Oct 2016, Saint-Malo, France. ⟨cea-01810097⟩