Modeling and Enforcing Secure Object Flows in Process-driven SOAs: An Integrated Model-driven Approach

Description

This talk presents an integrated model-driven approach for the specification and the enforcement of secure object flows in process-driven service-oriented architectures (SOA). In this context, a secure object flow ensures the confidentiality and the integrity of important objects (such as business contracts or electronic patient records) that are passed between different participants in SOA-based business processes. A formal and generic metamodel for secure object flows is specified that can be used to extend arbitrary process modeling languages. To demonstrate the approach, a UML extension for secure object flows is presented. Moreover, it is described how platform-independent models are mapped to platform-specific software artifacts via automated model transformations. In addition, we describe the integration of the approach with the Eclipse modeling framework and give a short tool demonstration.

Period	29 Nov 2012
Event title	OCG Arbeitskreis IT-Sicherheit: 2nd Young Researcher's Day
Event type	Unknown
Degree of Recognition	National