biblio.bib

@inproceedings{SMF09,
  title={{Reconfigurable SCA applications with the FraSCAti Platform}},
  author={Seinturier, Lionel and Merle, Philippe and Fournier, Damien and Dolet, Nicolas and Schiavoni, Valerio and Stefani, Jean-Bernard},
  booktitle={IEEE International Conference on Services Computing (SCC'09)},
  pages={268--275},
  year={2009},
  organization={IEEE}
}

@article{SMR12,
  title={{A component-based middleware platform for reconfigurable service-oriented architectures}},
  author={Seinturier, Lionel and Merle, Philippe and Rouvoy, Romain and Romero, Daniel and Schiavoni, Valerio and Stefani, Jean-Bernard},
  journal={Software: Practice and Experience},
  volume={42},
  number={5},
  pages={559--583},
  year={2012},
  publisher={John Wiley \& Sons, Ltd}
}

@inproceedings{PHM12,
  title={{A Federated Multi-Cloud PaaS Infrastructure}},
  author={Paraiso, Fawaz and Haderer, Nicolas and Merle, Philippe and Rouvoy, Romain and Seinturier, Lionel},
  booktitle={5th International Conference on Cloud Computing (CLOUD'12)},
  pages={392--399},
  year={2012},
  organization={IEEE}
}

@inproceedings{MRS11,
  title = {{A Reflective Platform for Highly Adaptive Multi-Cloud Systems}},
  author={Merle, Philippe and Rouvoy, Romain and Seinturier, Lionel},
  booktitle={International Workshop on Adaptive and Reflective Middleware (ARM'11) - 12th ACM/IFIP/USENIX International Middleware Conference},
  pages={14--21},
  year={2011},
  organization={ACM}
}

@inproceedings{BDL03,
  title = {{Model Driven Security for Process Oriented Systems}},
  author = { D. Basin and  J. Doser and  T. Lodderstedt},
  booktitle={8th ACM Symposium on Access Control Models and Technologies (SACMAT 03)},
  pages={100--109},
  year = {2003},
  organization={ACM}
}

@inproceedings{CSB08,
  title = {{Model-Driven Security in Practice: An Industrial Experience}},
  author = { M. Clavel and  V. Silva and  C. Braga and  M. Egea},
  booktitle={4th European Conference on Model Driven Architecture: Foundations and Applications (CMDA-FA 08)},
  pages={326--337},
  year = {2008}
}

@inproceedings{SSL09,
  title = {{Sec-MoSC Tooling - Incorporating Security Requirements into Service Composition}},
  author = {  A. R. Souza and  B. L. Silva and  F. A. Lins and  J. C. Damasceno and  N. S. Rosa and  P. R. Maciel and  R. W. Medeiros and  B. Stephenson and  H. R. Motahari-Nezhad and  J. Li 
and  C. Northfleet},
  booktitle={7th International Joint Conference on Service-Oriented Computing (ICSOC-ServiceWave 09)},
  pages={649--650},
  year = {2009}
}

@inproceedings{LS09,
  title = {{Model Driven Security Management: Making Security Management Manageable in Complex Distributed Systems}},
  author = {U. Lang and R. Schreiner},
  booktitle={Workshop on Modeling Security (MODSEC08) - International Conference on Model Driven Engineering Languages and Systems (MODELS)},
  year = {2009}
}

@Book{Lou08,
  author = {A. Louis},
  title = {{Bus de Service ESB, Nouvelle technologie pour l'intégration}},
  publisher = {Livre blanc, Petals Link},
  year = {2008},
}

@book{FJF08,
 author = {Footen, John and Faust, Joey},
 title = {{The Service-Oriented Media Enterprise: SOA, BPM, and Web Services in Professional Media Systems}},
 year = {2008},
 isbn = {0240809777, 9780240809779},
 publisher = {Focal Press},
} 

@Article{WMS09,
  title = {{Model-driven business process security requirement specification}},
  author = { C. Wolter and  M. Menzel and  A. Schaad and  P. Miseldine and  C. Meinel},
  journal = {Journal of Systems Architecture (JSA)},
  year = {2009},
  pages = {211--223}
}

@article{SHLP05,
    author = { M.-T. Schmidt and  B.  Hutchison and  P. Lambros and  R. Phippen},
    title = {{The Enterprise Service Bus: Making Service Oriented Architecture Real}},
    journal = {IBM Systems Journal},
	volume ={44},
	year = {2005},
	pages = {781--797}
}

@InProceedings{OBG12,
    author = {Wendpanga Francis Ouedraogo and  Frederique Biennier and  Parissa Ghodous},
    title = {{Adaptive Security Policy Model to Deploy Business Process in Cloud Infrastructure}},
    booktitle = {2nd International Conference on Cloud Computing and Services Science (CLOSER 2012)},
    pages = {287--290},
    year = {2012},
}

@article{blair2009models,
  title={{Models@run.time}},
  author={Blair, Gordon and Bencomo, Nelly and France, Robert B},
  journal={Computer},
  volume={42},
  number={10},
  pages={22--27},
  year={2009},
  publisher={IEEE}
}

%% inria-00614984, version 1
%% http://hal.inria.fr/inria-00614984
@inproceedings{acher:inria-00614984,
    hal_id = {inria-00614984},
    url = {http://hal.inria.fr/inria-00614984},
    title = {{Reverse Engineering Architectural Feature Models}},
    author = {Acher, Mathieu and Cleve, Anthony and Collet, Philippe and Merle, Philippe and Duchien, Laurence and Lahire, Philippe},
    abstract = {{Reverse engineering the variability of an existing system is a challenging activity. The architect knowledge is essential to identify variation points and explicit constraints 
between features, for instance in feature models (FMs), but the manual creation of FMs is both timeconsuming and error-prone. On a large scale, it is very difficult for an architect to 
guarantee that the resulting FM ensures a safe composition of the architectural elements when some features are selected. In this paper, we present a comprehensive, tool supported process 
for reverse engineering architectural FMs. We develop automated techniques to extract and combine different variability descriptions of an architecture. Then, alignment and reasoning 
techniques are applied to integrate the architect knowledge and reinforce the extracted FM. We illustrate the reverse engineering process when applied to a representative software system, 
FraSCAti, and we report on our experience in this context.}},
    language = {Anglais},
    affiliation = {Laboratoire d'Informatique, Signaux, et Syst{\`e}mes de Sophia-Antipolis (I3S) / Equipe MODALIS , ADAM - INRIA Lille - Nord Europe},
    booktitle = {{5th European Conference of Software Architecture (ECSA)}},
    publisher = {Springer},
    pages = {220-235},
    address = {Essen, Allemagne},
    volume = {6983},
    editor = {Springer },
    series = {Lecture Notes in Computer Science },
    audience = {internationale },
    doi = {10.1007/978-3-642-23798-0\_25 },
    year = {2011},
    month = Sep,
    pdf = {http://hal.inria.fr/inria-00614984/PDF/ecsa2011\_submission\_38\_1\_.pdf},
}

@article{fawaz2013COMPJ,
        author = {Fawaz Paraiso and Philippe Merle and Lionel Seinturier},
        title = {{soCloud: A service-oriented component-based PaaS for managing portability, provisioning, elasticity and high availability across multiple clouds}},
        journal = {Special Issue on Cloud Computing, Computing Journal, Springer},
        volume = {},
        month = {To appear},
        year = {2014}
} 

@book{kiczales1997aspect,
  title={{Aspect-oriented programming}},
  author={Kiczales, Gregor and Lamping, John and Mendhekar, Anurag and Maeda, Chris and Lopes, Cristina and Loingtier, Jean-Marc and Irwin, John},
  year={1997},
  publisher={Springer}
}


@book{Footen:2008:SME:1796090,
 author = {Footen, John and Faust, Joey},
 title = {{The Service-Oriented Media Enterprise: SOA, BPM, and Web Services in Professional Media Systems}},
 year = {2008},
 isbn = {0240809777, 9780240809779},
 publisher = {Focal Press},
} 

@misc{OAS06,
author = {{Organization for the Advancement of Structured Information Standards (OASIS)}},
title = {{Reference Model for Service Oriented Architecture 1.0: OASIS Standard{@ONLINE}}},
month = {october},
year = {2006},
url = {http://docs.oasis-open.org/soa-rm/v1.0/soa-rm.html},
}

@inproceedings{JJ02,
 author = {J\"{u}rjens, Jan},
 title = {{UMLsec: Extending UML for Secure Systems Development}},
 booktitle = {Proceedings of the 5th International Conference on the Unified Modeling Language},
 series = {UML '02},
 year = {2002},
 isbn = {3-540-44254-5},
 pages = {412--425},
 numpages = {14},
 url = {http://dl.acm.org/citation.cfm?id=647246.719625},
 acmid = {719625},
 publisher = {Springer-Verlag},
 address = {London, UK, UK},
} 

@inproceedings{LBD02,
 author = {Lodderstedt, Torsten and Basin, David A. and Doser, J\"{u}rgen},
 title = {{SecureUML: A UML-Based Modeling Language for Model-Driven Security}},
 booktitle = {Proceedings of the 5th International Conference on the Unified Modeling Language},
 series = {UML '02},
 year = {2002},
 isbn = {3-540-44254-5},
 pages = {426--441},
 numpages = {16},
 url = {http://dl.acm.org/citation.cfm?id=647246.719477},
 acmid = {719477},
 publisher = {Springer-Verlag},
 address = {London, UK, UK},
} 

@incollection{LZN14,
title = "{Chapter 3 - Advances in Model-Driven Security}",
editor = "Atif Memon",
booktitle = "Advances in Computers",
publisher = "Elsevier",
year = "2014",
volume = "93",
pages = "103 - 152",
series = "Advances in Computers ",
issn = "0065-2458",
doi = "http://dx.doi.org/10.1016/B978-0-12-800162-2.00003-8",
url = "http://www.sciencedirect.com/science/article/pii/B9780128001622000038",
author = "Levi Lúcio and Qin Zhang and Phu H. Nguyen and Moussa Amrani and Jacques Klein and Hans Vangheluwe and Yves Le Traon",
keywords = "Information security",
keywords = "Model-driven security",
keywords = "Model-driven engineering",
keywords = "Separation of concerns",
keywords = "Survey "
}

@INPROCEEDINGS{LU10,
author={Lang, U.},
booktitle={Cloud Computing Technology and Science (CloudCom), 2010 IEEE Second International Conference on},
title={{OpenPMF SCaaS: Authorization as a Service for Cloud \& SOA Applications}},
year={2010},
month={Nov},
pages={634-643},
keywords={application generators;authorisation;cloud computing;service-oriented architecture;ObjectSecurity OpenPMF;OpenPMF SCaaS;OpenPMF security and compliance as a service;SOA application;application authorization management;application development tool;cloud application;model-driven security;policy automation;subscription-based cloud service;technical policy generation;Authorization;Cloud computing;Mashups;Runtime;Service oriented architecture;Unified modeling language;Agile policy management;Cloud;Platform as a Service (PaaS);Secure Development Life Cycle (SDCL);Service Oriented Architecture (SOA);application security;authorization management;mashup;model-driven security;policy automation},
doi={10.1109/CloudCom.2010.13},}

@ARTICLE{ AHB08,
AUTHOR = "Muhammad Alam and Michael Hafner and Ruth Breu",
TITLE = "{Constraint based role based access control in the SECTET-framework A model-driven approach}",
JOURNAL = "Journal of Computer Security",
PAGES = {223-260},
YEAR = {2008},
  }
  
  
  @article{RFP07,
 author = {Rodr\'{\i}guez, Alfonso and Fern\'{a}ndez-Medina, Eduardo and Piattini, Mario},
 title = {{A BPMN Extension for the Modeling of Security Requirements in Business Processes}},
 journal = {IEICE - Trans. Inf. Syst.},
 issue_date = {March 2007},
 volume = {E90-D},
 number = {4},
 month = mar,
 year = {2007},
 issn = {0916-8532},
 pages = {745--752},
 numpages = {8},
 url = {http://dx.doi.org/10.1093/ietisy/e90-d.4.745},
 doi = {10.1093/ietisy/e90-d.4.745},
 acmid = {1237868},
 publisher = {Oxford University Press},
 address = {Oxford, UK},
 keywords = {security requirement, business process, BPMN},
} 

@misc{CSA11,
author = {{Cloud Security Alliance}},
title = {{Security Guidance for Critical Areas of Focus in Cloud Computing- CSA Guidance v3}},
month = jun,
year = {2011},
url = {http://www.cloudsecurityalliance.org/guidance/csaguide.v3.0.pdf}
}

@inproceedings{MPB12,
 author = {Modi, Chirag and Patel, Dhiren and Borisanya, Bhavesh and Patel, Avi and Rajarajan, Muttukrishnan},
 title = {{A Novel Framework for Intrusion Detection in Cloud}},
 booktitle = {Proceedings of the Fifth International Conference on Security of Information and Networks},
 series = {SIN '12},
 year = {2012},
 isbn = {978-1-4503-1668-2},
 location = {Jaipur, India},
 pages = {67--74},
 numpages = {8},
 url = {http://doi.acm.org/10.1145/2388576.2388585},
 doi = {10.1145/2388576.2388585},
 acmid = {2388585},
 publisher = {ACM},
 address = {New York, NY, USA},
 keywords = {cloud computing, decision tree (DT) classifier, intrusion detection},
} 


@article{AVG11,
 author = {Avgerinos, Thanassis and Cha, Sang Kil and Rebert, Alexandre and Schwartz, Edward J. and Woo, Maverick and Brumley, David},
 title = {{Automatic Exploit Generation}},
 journal = {Commun. ACM},
 issue_date = {February 2014},
 volume = {57},
 number = {2},
 month = feb,
 year = {2014},
 issn = {0001-0782},
 pages = {74--84},
 numpages = {11},
 url = {http://doi.acm.org/10.1145/2560217.2560219},
 doi = {10.1145/2560217.2560219},
 acmid = {2560219},
 publisher = {ACM},
 address = {New York, NY, USA},
} 

@inproceedings{OFG13,
  title = {{Model driven security in multi-context}},
  author = {Wendpanga Francis Ouedraogo and  Frederique Biennier and  Parissa Ghodous},
  booktitle={International Journal of Electronic Business Management},
  volume = "11 No. 3",
  pages={178-190},
  year = {2013}
}