Showing the Benefits of Applying a Model Driven Architecture for Developing Secure OLAP Applications

被引:0
作者
Blanco, Carlos [1 ]
Garcia-Rodriguez de Guzman, Ignacio [2 ]
Fernandez-Medina, Eduardo [3 ]
Trujillo, Juan [4 ]
机构
[1] Univ Cantabria, Fac Sci, Dept Math Stat & Comp Sci, GSyA Res Grp, E-39005 Santander, Spain
[2] Univ Castilla La Mancha, Escuela Super Informat, Inst Informat Technol & Syst, Dept Informat Technol & Syst,Alarcos Res Grp, E-13071 Ciudad Real, Spain
[3] Univ Castilla La Mancha, Escuela Super Informat, Inst Informat Technol & Syst, Dept Informat Technol & Syst,GSyA Res Grp, E-13071 Ciudad Real, Spain
[4] Univ Alicante, Fac Informat, Dept Informat Languages & Syst, Lucentia Res Grp, E-03080 Alicante, Spain
关键词
Security; Confidentiality; OLAP; Data Warehouses; Model Driven; MDA; Transformations; SSAS; Case Study; ACCESS-CONTROL; UML; DESIGN;
D O I
暂无
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
Data Warehouses (DW) manage enterprise information that is queried for decision making purposes by using On-Line Analytical Processing (OLAP) tools. The establishment of security constraints in all development stages and operations of the DW is highly important since otherwise, unauthorized users may discover vital business information. The final users of OLAP tools access and analyze the information from the corporate DW by using specific views or cubes based on the multidimensional modelling containing the facts and dimensions (with the corresponding classification hierarchies) that a decision maker or group of decision makers are interested in. Thus, it is important that security constraints will be also established over this metadata layer that connects the DW's repository with the decision makers, that is, directly over the multidimensional structures that final users manage. In doing so, we will not have to define specific security constraints for every particular user, thereby reducing the developing time and costs for secure OLAP applications. In order to achieve this goal, a model driven architecture to automatically develop secure OLAP applications from models has been defined. This paper shows the benefits of this architecture by applying it to a case study in which an OLAP application for an airport DW is automatically developed from models. The architecture is composed of: (1) the secure conceptual modelling by using a UML profile; (2) the secure logical modelling for OLAP applications by using an extension of CWM; (3) the secure implementation into a specific OLAP tool, SQL Server Analysis Services (SSAS); and (4) the transformations needed to automatically generate logical models from conceptual models and the final secure implementation.
引用
收藏
页码:79 / 106
页数:28
相关论文
共 60 条
[1]  
Abello A., 2006, INFORM SYST, V31, P668
[2]  
[Anonymous], 2002, Managing Information Security Risks: The OCTAVE Approach
[3]   Model Driven Security: From UML models to access control infrastructures [J].
Basin, D ;
Doser, J ;
Lodderstedt, T .
ACM TRANSACTIONS ON SOFTWARE ENGINEERING AND METHODOLOGY, 2006, 15 (01) :39-91
[4]  
Bezivin J., 2004, UPGRADE: The European Journal for the Informatics Professional, V5
[5]  
Braganca A., 2007, Methodological Approaches and Techniques for Model Driven Development of Software Product Lines
[6]  
Braganca A., 2007, INT C QUAL INF COMM
[7]  
Cuccuru A., 2005, EUR DIG SYST DES POR, P26
[8]   Evaluation of MDA/PSM database model quality in the context of selected non-functional requirements [J].
Dubielewicz, Iwona ;
Hnatkowska, Bogumila ;
Huzar, Zbigniew ;
Tuzinkiewicz, Lech .
DEPCOS - RELCOMEX '07: INTERNATIONAL CONFERENCE ON DEPENDABILITY OF COMPUTER SYSTEMS, PROCEEDINGS, 2007, :19-+
[9]   Developing secure data warehouses with a UML extension [J].
Fernandez-Medina, Eduardo ;
Trujillo, Juan ;
Villarroel, Rodolfo ;
Piattini, Mario .
INFORMATION SYSTEMS, 2007, 32 (06) :826-856
[10]   Access control and audit model for the multidimensional modeling of data warehouses [J].
Fernandez-Medina, Eduardo ;
Trujillo, Juan ;
Villarroel, Rodolfo ;
Piattini, Mario .
DECISION SUPPORT SYSTEMS, 2006, 42 (03) :1270-1289