Model-Driven Development of a Secure eHealth Application

• Published in: Engineering Secure Future Internet Services and Systems pp. 97 - 118
• Main Authors: de Dios, Miguel A. García, Dania, Carolina, Basin, David, Clavel, Manuel
• Format: Book Chapter
• Language: English
• Published: Cham Springer International Publishing
• Series: Lecture Notes in Computer Science
• ISBN: 9783319074511; 3319074512
• ISSN: 0302-9743; 1611-3349
• DOI: 10.1007/978-3-319-07452-8_4

We report on our use of ActionGUI to develop a secure eHealth application based on the NESSoS eHealth case study. ActionGUI is a novel model-driven methodology with an associated tool for developing secure data-management applications with three distinguishing features. First, it enables a model-based separation of concerns, where behavior and security are modeled individually and subsequently combined. Second, it supports model-based quality assurance checks, where the properties proven about the models transfer to the generated applications. Finally, for data-management applications, the ActionGUI tool automatically generates complete, ready-to-deploy, security-aware, web applications. We explain these features in the context of the eHealth application.