Towards security assurance in round-trip engineering: A type-based approach

1Citations
Citations of this article
18Readers
Mendeley users who have this article in their library.

Abstract

Security assurance is a property that ensures that the application code behaves consistently with the access control policy specified at the design level. Security assurance proofs are valid as long as software engineers do not modify the generated code. This assumption does not hold in Round-Trip Engineering, since programmers may modify the generated code and the models are automatically re-generated. This paper proposes a round-trip engineering approach for access control that preserves security assurance both when generating code from models and vice versa. The approach is to extend programming languagesE- typing mechanisms with additional rules that ensure consistency between models and code, even when code is arbitrarily modified by programmers. This paper presents a formal description of the solution and an initial sketch of the required proofs of correctness. Ongoing work is the development of a prototype to automate most of the process and its validation in a case study. © 2013 Elsevier B.V.

Cite

CITATION STYLE

APA

Pavlich-Mariscal, J. A., Franky, M. C., & Lopez, A. (2013). Towards security assurance in round-trip engineering: A type-based approach. Electronic Notes in Theoretical Computer Science, 292, 83–94. https://doi.org/10.1016/j.entcs.2013.02.007

Register to see more suggestions

Mendeley helps you to discover research relevant for your work.

Already have an account?

Save time finding and organizing research with Mendeley

Sign up for free