Using Model Driven Security Approaches in Web Application Development - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2014

Using Model Driven Security Approaches in Web Application Development

Christoph Hochreiner
  • Fonction : Auteur
  • PersonId : 993467
Zhendong Ma
  • Fonction : Auteur
  • PersonId : 993468
Peter Kieseberg
  • Fonction : Auteur
  • PersonId : 993469
Edgar Weippl
  • Fonction : Auteur
  • PersonId : 993471

Résumé

With the rise of Model Driven Engineering (MDE) as a software development methodology, which increases productivity and, supported by powerful code generation tools, allows a less error-prone implementation process, the idea of modeling security aspects during the design phase of the software development process was first suggested by the research community almost a decade ago. While various approaches for Model Driven Security (MDS) have been proposed during the years, it is still unclear, how these concepts compare to each other and whether they can improve the security of software projects. In this paper, we provide an evaluation of current MDS approaches based on a simple web application scenario and discuss the strengths and limitations of the various techniques, as well as the practicability of MDS for web application security in general.
Fichier principal
Vignette du fichier
978-3-642-55032-4_42_Chapter.pdf (528.44 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01397248 , version 1 (15-11-2016)

Licence

Identifiants

Citer

Christoph Hochreiner, Zhendong Ma, Peter Kieseberg, Sebastian Schrittwieser, Edgar Weippl. Using Model Driven Security Approaches in Web Application Development. 2nd Information and Communication Technology - EurAsia Conference (ICT-EurAsia), Apr 2014, Bali, Indonesia. pp.419-431, ⟨10.1007/978-3-642-55032-4_42⟩. ⟨hal-01397248⟩
200 Consultations
164 Téléchargements

Altmetric

Partager

More