ObjectSecurity - Business-Driven Model Driven Security Management

OpenPMF 2.0 Model Driven Security Management

Services

Model driven security - Model driven architecture for agile, secure IT systems

SOA security Model driven security Middleware security Training workshops Project success stories

Defining security policies for complex, large IT environments is a difficult, cumbersome, and error-prone task. This is in particular the case for agile IT environments such as highly distributed component based systems and Service Oriented Architecture (SOA). We have shown that model-driven security, which allows the generation of security policies from the application models, helps build and maintain secure, agile IT environments.

Blog
SecureMDA Product
Success Stories
SecureMDA Video
MDS Study (see below)

Today software modelling is the accepted best-practice approach for developing flexible and reusable software applications where abstract application models are turned into software using a modelling toolchain. The OMG Model Driven Architecture (MDA) is the leading standard framework for software modelling. The ObjectSecurity/Fraunhofer FOKUS SecureMiddleware includes a full MDA development toolchain.

Why not apply the same logic to security and automatically generate security policies and high assurance from the application models? This way, you can be confident that the deployed system matches the models, and that you have not forgotten any security policy aspects.

Our team of modelling experts can help you set up a modelling framework for security that includes all the required model transformations. We are specialists in Eclipse based modelling and toolchain integration.

And most importantly for agile SOA style environments, you can reconfigure and redeploy your (possibly distributed) applications by simple changes in the model - the underlying software and security policies will be automatically matched to your models through the automatic MDA and SecureMDA tool chains.

In-depth study of model-driven security

ObjectSecurity's world-leading Model Driven Security (MDS) experts have just compiled the definitive in-depth 50-page resource about MDS. It includes: Introduction - Problem definition - Model Driven Security (MDS) definitions and related work (research & vendors), MDS terminology and concepts, Benefits and differences to traditional approaches, MDS architectures overview, Implications of MDS for specific industries, MDS case study, Market trends, Future work, Conclusion. contact us to buy the study

OpenPMF 2.0 SecureMDA model driven security product

This approach, which has been showcased by ObjectSecurity (with their SecureMiddleware partner Fraunhofer FOKUS) in their SecureMDA technology, can be easily adapted for your particular middleware. Of course, XML webservices/SOA, J2EE, and CORBA/CCM are prime examples of middleware where our technology can be easily ported to. SecureMDA

Please contact us for model driven security consulting services

SecureMDA product page

ModelDrivenSecurity.org - blog

www.modeldrivensecurity.com