Optimizing Service Protection with Model Driven Security@run.time - Archive ouverte HAL
Communication Dans Un Congrès Année : 2015

Optimizing Service Protection with Model Driven Security@run.time

Résumé

Enterprises are more and more involved in collabo-rative business. This leads to open and outsourcing all or part of their information system (IS) to create collaborative processes by composing business services picked in each partner IS and to take advantage of Cloud computing. Business services outsourcing and their dynamic collaboration context can bring lost of control on IS and new security risks can occur. This leads to inconsistent protec-tion allowing competitors to access to unauthorized information. To address this issue, systematic security service invocations may be added, without paying attention to the business context leading to costly over protection. To address this issue, an adaptive security service model deployment is required to provide a business service consistent protection by taking into account the collaboration context (business service data criticity, partners involved in the collaboration, etc.), and the cloud deployment and execution environment. In this paper, we propose an adaptive security model based on MDS@run.time, the marriage of Model Driven Security (MDS) and Models@run.time approaches, allow-ing to select at runtime the appropriate security components to apply. The MDS approach is used to generate security policies, which are interpreted at runtime and load appropriate security mechanisms depending on the context (which takes advantage of the Models@run.time approach) ensuring business process end to end protection. A proof of concept prototype is built on top of the OW2 FraSCAti middleware, validating our proposition efficiency. Our experiments and simulations show that MDS@run.time improves the system efficiency when the over-protection risk rate increases.
Fichier principal
Vignette du fichier
sose.pdf (260.12 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01109967 , version 1 (27-01-2015)

Identifiants

  • HAL Id : hal-01109967 , version 1

Citer

Francis Wendpanga, Frédérique Biennier, Philippe Merle. Optimizing Service Protection with Model Driven Security@run.time. 9th International IEEE Symposium on Service-Oriented System Engineering - IEEE SOSE 2015, Mar 2015, Redwood City, United States. pp.50-58. ⟨hal-01109967⟩
593 Consultations
242 Téléchargements

Partager

More