An engineering process for security patterns application in component based models

Rahma Bouaziz (1) , Slim Kallel (2) , Bernard Coulette (1)

1 IRIT-MACAO - Modèles, Architectures, Composants, Agilité et prOcessus
2 ReDCAD - Research Unit on Development and Control of Distributed Applications

Security engineering with patterns is currently a very active area of research. Security patterns - an adaptation of Design Patterns to security - capture experts' experience in order to solve recurrent security problems in a structured and reusable way. In this paper, our objective is to describe an engineering process, called SCRIP (SeCurity patteRn Integration Process), which provides guidelines for integrating security patterns into component-based models. SCRIP defines activities and products to integrate security patterns in the whole development process, from UML component modeling until aspect code generation. The definition of SCRIP has been made using the OMG standard Software and System Process Engineering Meta-model (SPEM). We are developing a CASE tool to support that process.

Mots clés: Component based systems; Security patterns; Component; Process; SPEM; Aspects

Domaines: Génie logiciel [cs.SE]; Systèmes embarqués; Cryptographie et sécurité [cs.CR]; Interface homme-machine [cs.HC]; Architectures Matérielles [cs.AR]; Modélisation et simulation

Rahma Bouaziz, Slim Kallel, Bernard Coulette. An engineering process for security patterns application in component based models. IEEE International Workshop on Enabling Technologies: Infrastructure for Collaborative Enterprises - WETICE 2013, Jun 2013, Hammamet, Tunisia. pp. 231-236. ⟨hal-01150334⟩