Um framework baseado em padrões de segurança para transformações de modelos

Abstract

The increased automation in the process of systems development is becoming more popular in the current context because of the increased complexity. With this increasingly arise tools based on the idea of automatic code generation from models. As result of this complexity, information systems may have errors and vulnerabilities. So, there is a need for increasing the level of abstraction and automation in the software development processes, thereby allowing greater security in the application. These needs are answered by using the approaches of Model-Driven Engineering that allows the modeling and the application of transformations onto models aiming at obtaining software in an automatized way. This study proposes a framework based on security patterns oriented to model is proposed in this paper. This provides guidelines for implementing the model application abd the correct validation of using patterns. The security is implicitly included into the system through a transformation between models, which automatically encodes the security pattern, ensuring that the generated code is not susceptible to errors or changes in code. These transformations are defined through XML syntax and a set of rule implemented in Java and ATL language. They can be further executed in a unidirectional way, through the transformation application implemented to support the use of the proposed approach. It is also presented an example of model transformation for the Java platform.