Publicación: SEMI-FORMAL TRANSFORMATION OF SECURE BUSINESS PROCESSES INTO ANALYSIS CLASS AND USE CASE MODELS: AN MDA APPROACH

Fecha
2010
Autores
Título de la revista
ISSN de la revista
Título del volumen
Editor
INFORMATION AND SOFTWARE TECHNOLOGY
Resumen
CONTEXT
MODEL-DRIVEN DEVELOPMENT (MDD) IS AN ALTERNATIVE APPROACH FOR INFORMATION SYSTEMS DEVELOPMENT. THE BASIC UNDERLYING CONCEPT OF THIS APPROACH IS THE DEFINITION OF ABSTRACT MODELS THAT CAN BE TRANSFORMED TO OBTAIN MODELS NEAR IMPLEMENTATION. ONE FAIRLY WIDESPREAD PROPOSAL IN THIS SPHERE IS THAT OF MODEL DRIVEN ARCHITECTURE (MDA). BUSINESS PROCESS MODELS ARE ABSTRACT MODELS WHICH ADDITIONALLY CONTAIN KEY INFORMATION ABOUT THE TASKS THAT ARE BEING CARRIED OUT TO ACHIEVE THE COMPANY?S GOALS, AND TWO NOTATIONS CURRENTLY EXIST FOR MODELLING BUSINESS PROCESSES: THE UNIFIED MODELLING LANGUAGE (UML), THROUGH ACTIVITY DIAGRAMS, AND THE BUSINESS PROCESS MODELLING NOTATION (BPMN).
OBJECTIVE
OUR RESEARCH IS PARTICULARLY FOCUSED ON SECURITY REQUIREMENTS, IN SUCH A WAY THAT SECURITY IS MODELLED ALONG WITH THE OTHER ASPECTS THAT ARE INCLUDED IN A BUSINESS PROCESS. TO THIS END, IN EARLIER WORKS WE HAVE DEFINED A METAMODEL CALLED SECURE BUSINESS PROCESS (SBP), WHICH MAY ASSIST IN THE PROCESS OF DEVELOPING SOFTWARE AS A SOURCE OF HIGHLY VALUABLE REQUIREMENTS (INCLUDING VERY ABSTRACT SECURITY REQUIREMENTS), WHICH ARE TRANSFORMED INTO MODELS WITH A LOWER ABSTRACTION LEVEL, SUCH AS ANALYSIS CLASS DIAGRAMS AND USE CASE DIAGRAMS THROUGH THE APPROACH PRESENTED IN THIS PAPER.
Descripción
Palabras clave
UML, SECURE BUSINESS PROCESSES, MDA, BPMN