Skip to content

Query based Access Control for Secure Collaborative Modeling using Bidirectional Transformations

Jump to bottom
Istvan Rath edited this page Aug 22, 2025 · 2 revisions

Query-based Access Control for Secure Collaborative Modeling using Bidirectional Transformations

Abstract

Large-scale model-driven system engineering projects are carried out collaboratively. Engineering artifacts stored in model repositories are developed in either offline (checkout-modify-commit) or online (GoogleDoc-style) scenarios. Complex systems frequently integrate models and components developed by different teams, vendors and suppliers. Thus confidentiality and integrity of design artifacts need to be protected by access control policies.

We propose a technique for secure collaborative modeling where (1) fine-grained access control for models can be defined by model queries, and (2) such access control policies are strictly enforced by bidirectional model transformations. Each collaborator obtains a filtered local copy of the model containing only those model elements which they are allowed to read; write access control policies are checked on the server upon submitting model changes. We illustrate the approach and carry out an initial scalability assessment using a case study of the MONDO EU project.

Publication

Conference Paper: Query-based access control for secure collaborative modeling using bidirectional transformations
Authors: Csaba Debreceni, Gábor Bergmann, István Ráth, Dániel Varró
Conference: ACM/IEEE 19th International Conference on Model Driven Engineering Languages and Systems (MODELS 2016)
Pages: 351-361
Year: 2016
DOI: 10.1145/2976767.2976793

Extended Journal Version:
Title: Enforcing fine-grained access control for secure collaborative modelling using bidirectional transformations
Journal: Software and Systems Modeling
Volume: 18(3), pages 1737-1769
Year: 2019
Published Online: November 21, 2017
DOI: 10.1007/s10270-017-0631-8

Citation

@inproceedings{debreceni2016query,
  title={Query-based access control for secure collaborative modeling using bidirectional transformations},
  author={Debreceni, Csaba and Bergmann, G{\'a}bor and R{\'a}th, Istv{\'a}n and Varr{\'o}, D{\'a}niel},
  booktitle={Proceedings of the ACM/IEEE 19th International Conference on Model Driven Engineering Languages and Systems},
  pages={351--361},
  year={2016},
  doi={10.1145/2976767.2976793}
}

Tags: access-control, collaborative-modeling, bidirectional-transformations, model-security, MONDO, version-control

Evaluation

Reproducible Measurement

This github project contains well-detailed instructions how to setup the measurement environment to reproduce our evaluation.

Results

Raw Data

  • Model Size: 25
ModelSize UserSize NumberOfLegs ExecutionTime(nano)
25 10 11 642894441
25 10 11 462378306
25 10 11 441805208
25 10 11 270496868
25 10 11 283674137
25 10 11 296010212
25 10 11 243486312
25 10 11 250196186
25 10 11 261531553
25 10 11 257995719
25 20 11 306916217
25 20 11 310739005
25 20 11 318599693
25 20 11 306722490
25 20 11 279037525
25 20 11 293044012
25 20 11 308486130
25 20 11 454447911
25 20 11 374107756
25 20 11 379059121
25 30 11 671912399
25 30 11 573424795
25 30 11 596262314
25 30 11 678746293
25 30 11 463823772
25 30 11 713891235
25 30 11 851129752
25 30 11 695068520
25 30 11 716668413
25 30 11 572464714
25 30 26 1202310181
25 30 26 1577478088
25 30 26 1239914127
25 30 26 1176340104
25 30 26 1414988806
25 30 26 1191060344
25 30 26 1512531727
25 30 26 1310859604
25 30 26 1223582919
25 30 26 1300249108
25 40 11 669543203
25 40 11 668228598
25 40 11 716546959
25 40 11 682780342
25 40 11 684255745
25 40 11 650531038
25 40 11 684561945
25 40 11 669415334
25 40 11 653570367
25 40 11 657383320
25 40 26 1392670457
25 40 26 1489672397
25 40 26 1435788560
25 40 26 1469559881
25 40 26 1455890384
25 40 26 1494674653
25 40 26 1479379647
25 40 26 1442110125
25 40 26 1486243476
25 40 26 1464314291
25 50 11 755241421
25 50 11 750462828
25 50 11 751779143
25 50 11 746904327
25 50 11 743045188
25 50 11 743817529
25 50 11 726284616
25 50 11 728546045
25 50 11 711058890
25 50 11 752592538
25 50 26 1712832367
25 50 26 1639731092
25 50 26 1589225713
25 50 26 1592415148
25 50 26 1520282080
25 50 26 1681668017
25 50 26 1576096342
25 50 26 1503287582
25 50 26 1623279712
25 50 26 1506097688
25 50 51 3437956333
25 50 51 2853353547
25 50 51 2737920624
25 50 51 2964835386
25 50 51 3193218708
25 50 51 2972518597
25 50 51 3017067627
25 50 51 3071876477
25 50 51 2752657115
25 50 51 2637445715
25 60 11 872199355
25 60 11 884774061
25 60 11 909422262
25 60 11 856992873
25 60 11 864765037
25 60 11 896273219
25 60 11 890503326
25 60 11 928111549
25 60 11 881820262
25 60 11 864445580
25 60 26 2031868266
25 60 26 1970338851
25 60 26 1996125464
25 60 26 2047203471
25 60 26 1860936689
25 60 26 1900502278
25 60 26 2091422352
25 60 26 1845140901
25 60 26 1888230352
25 60 26 1873371123
25 60 51 4023718057
25 60 51 3949439881
25 60 51 4630726860
25 60 51 4522774868
25 60 51 4679617422
25 60 51 4264641017
25 60 51 4189315521
25 60 51 4722372019
25 60 51 4423044932
25 60 51 4868363736
25 70 11 1064663683
25 70 11 1073502414
25 70 11 989933051
25 70 11 1328989948
25 70 11 1061872820
25 70 11 1084050899
25 70 11 1276536183
25 70 11 1412692310
25 70 11 1197502507
25 70 11 1387411182
25 70 26 2828573201
25 70 26 3041624738
25 70 26 2812588390
25 70 26 2458527719
25 70 26 3002490223
25 70 26 2584095589
25 70 26 2470416898
25 70 26 2605119860
25 70 26 2392243232
25 70 26 2394425972
25 70 51 4664978863
25 70 51 4268237151
25 70 51 5228449181
25 70 51 5204498053
25 70 51 4532261065
25 70 51 5046888291
25 70 51 5071471062
25 70 51 4685334713
25 70 51 4803983159
25 70 51 4720237177
25 80 11 1276424565
25 80 11 1628652744
25 80 11 1305658917
25 80 11 1845604049
25 80 11 1181798665
25 80 11 1312011273
25 80 11 1325129098
25 80 11 1491652430
25 80 11 1293372449
25 80 11 1296567872
25 80 26 2996412420
25 80 26 2893206520
25 80 26 2779041159
25 80 26 2834498331
25 80 26 2627791878
25 80 26 2801424511
25 80 26 3221958266
25 80 26 2947054862
25 80 26 2779878504
25 80 26 3052306225
25 80 51 5395291541
25 80 51 5428686956
25 80 51 4380827038
25 80 51 5423316491
25 80 51 5472237844
25 80 51 5304058640
25 80 51 5748428910
25 80 51 5591078733
25 80 51 5857180185
25 80 51 5744530426
25 80 76 7663405956
25 80 76 9014109124
25 80 76 9937003308
25 80 76 9586347181
25 80 76 9213447973
25 80 76 9548537962
25 80 76 9393438950
25 80 76 9698784397
25 80 76 9423103947
25 80 76 9167802869
25 90 11 1324461104
25 90 11 1263311017
25 90 11 1322389554
25 90 11 1358500563
25 90 11 1387001491
25 90 11 1613756310
25 90 11 1388266487
25 90 11 1287339122
25 90 11 1478557698
25 90 11 1397652185
25 90 26 3237455979
25 90 26 3075934047
25 90 26 3067484054
25 90 26 1680048496
25 90 26 2953891320
25 90 26 3263998255
25 90 26 3139743708
25 90 26 3097084049
25 90 26 2955345340
25 90 26 2902179960
25 90 51 6335780649
25 90 51 6293980999
25 90 51 6373813531
25 90 51 5936691121
25 90 51 5883285400
25 90 51 6188230992
25 90 51 3798059739
25 90 51 5228912329
25 90 51 4656764934
25 90 51 5162925916
25 90 76 8657756661
25 90 76 5999729295
25 90 76 5458520021
25 90 76 6893335244
25 90 76 6236517280
25 90 76 9099534072
25 90 76 10784488174
25 90 76 6505532332
25 90 76 7862360345
25 90 76 7051769948
25 100 11 1328245405
25 100 11 1193442798
25 100 11 1205757918
25 100 11 1245001059
25 100 11 1262976592
25 100 11 1367158396
25 100 11 1216632704
25 100 11 1189435263
25 100 11 1268921823
25 100 11 1218155148
25 100 26 2324089046
25 100 26 2317398417
25 100 26 2340062309
25 100 26 2340955676
25 100 26 2722596965
25 100 26 2344754944
25 100 26 2341163515
25 100 26 3098087750
25 100 26 3166479283
25 100 26 2304840817
25 100 51 4402867412
25 100 51 3745922436
25 100 51 3488644747
25 100 51 3923220055
25 100 51 4510685977
25 100 51 4758535631
25 100 51 5970485109
25 100 51 4557183820
25 100 51 4462284650
25 100 51 3826162093
25 100 76 6263227197
25 100 76 6907351567
25 100 76 6442232434
25 100 76 5535215719
25 100 76 6916631207
25 100 76 5727047549
25 100 76 6321688202
25 100 76 6765751419
25 100 76 6336934884
25 100 76 7794071875
25 100 101 12475539752
25 100 101 10395338584
25 100 101 10453285122
25 100 101 9752204230
25 100 101 12322127830
25 100 101 9923171303
25 100 101 9612514407
25 100 101 11096218051
25 100 101 14294415922
25 100 101 15234411945
  • Model Size: 38
ModelSize UserSize NumberOfLegs ExecutionTime(nano)
38 10 11 684795870
38 10 11 724832734
38 10 11 508705516
38 10 11 466850700
38 10 11 464118426
38 10 11 445944888
38 10 11 441612337
38 10 11 445280744
38 10 11 452973364
38 10 11 451730604
38 20 11 572357800
38 20 11 533399905
38 20 11 545707327
38 20 11 539579061
38 20 11 528112404
38 20 11 559999914
38 20 11 523643431
38 20 11 542084252
38 20 11 535394050
38 20 11 531765843
38 30 11 609173155
38 30 11 632139825
38 30 11 591201470
38 30 11 607839305
38 30 11 570011696
38 30 11 591664190
38 30 11 586513966
38 30 11 593094688
38 30 11 574804403
38 30 11 579269954
38 30 26 1268823462
38 30 26 1289234908
38 30 26 1218303971
38 30 26 1174320299
38 30 26 1320275665
38 30 26 1199031366
38 30 26 1236441586
38 30 26 1262693487
38 30 26 1248351718
38 30 26 1241262517
38 40 11 676360417
38 40 11 685865858
38 40 11 662397122
38 40 11 742768497
38 40 11 681225824
38 40 11 707994757
38 40 11 696390396
38 40 11 709455191
38 40 11 667827032
38 40 11 696002943
38 40 26 1442931218
38 40 26 1451314925
38 40 26 1540448052
38 40 26 1510091539
38 40 26 1418792779
38 40 26 1437243863
38 40 26 1426343418
38 40 26 1450568244
38 40 26 1376039892
38 40 26 1477294411
38 50 11 763596047
38 50 11 753786545
38 50 11 787886305
38 50 11 804927845
38 50 11 771138989
38 50 11 798563087
38 50 11 778320565
38 50 11 840851971
38 50 11 810062672
38 50 11 778994973
38 50 26 1641263800
38 50 26 1709206298
38 50 26 1648633114
38 50 26 1613140490
38 50 26 1675236545
38 50 26 1722182142
38 50 26 1670757737
38 50 26 1623427253
38 50 26 1712190032
38 50 26 1699742339
38 50 51 3549541663
38 50 51 2962552575
38 50 51 2748591419
38 50 51 2778831182
38 50 51 3389031558
38 50 51 3436530538
38 50 51 3522523409
38 50 51 3174218946
38 50 51 2794353272
38 50 51 2852794177
38 60 11 1000003849
38 60 11 1089345242
38 60 11 921865251
38 60 11 931071762
38 60 11 935005313
38 60 11 931706399
38 60 11 1029263004
38 60 11 940350547
38 60 11 921153636
38 60 11 977144519
38 60 26 1818318512
38 60 26 1983112415
38 60 26 2074747739
38 60 26 2012745339
38 60 26 1995365098
38 60 26 1914235923
38 60 26 2190913659
38 60 26 2099624306
38 60 26 2061086366
38 60 26 2132647235
38 60 51 3739371650
38 60 51 4128058947
38 60 51 4178338526
38 60 51 4136854057
38 60 51 4315186595
38 60 51 3722370737
38 60 51 3961712237
38 60 51 4019801184
38 60 51 4085173489
38 60 51 3089424786
38 70 11 1107398182
38 70 11 1095712138
38 70 11 1132331200
38 70 11 1032615803
38 70 11 1022857192
38 70 11 1056192734
38 70 11 1048317935
38 70 11 1087048318
38 70 11 1069800222
38 70 11 1002420943
38 70 26 2249187352
38 70 26 2313445193
38 70 26 2323930387
38 70 26 2326518969
38 70 26 2070645264
38 70 26 2468736649
38 70 26 2041898009
38 70 26 2094718700
38 70 26 2245445817
38 70 26 2041693591
38 70 51 4294024620
38 70 51 3550536384
38 70 51 3397893810
38 70 51 3397058175
38 70 51 3508425831
38 70 51 3383361309
38 70 51 4068101157
38 70 51 3634941380
38 70 51 3373332849
38 70 51 3285187601
38 80 11 1114296222
38 80 11 1138190045
38 80 11 1089424358
38 80 11 1075556430
38 80 11 1061242460
38 80 11 1094866241
38 80 11 1084227520
38 80 11 1091196979
38 80 11 1094539942
38 80 11 1147474817
38 80 26 2363951000
38 80 26 2641245410
38 80 26 2299610622
38 80 26 2492767320
38 80 26 2229693224
38 80 26 2185712117
38 80 26 2188207044
38 80 26 2442967569
38 80 26 2159032136
38 80 26 2238626893
38 80 51 4434079231
38 80 51 4594972084
38 80 51 4459720871
38 80 51 4622270025
38 80 51 4492180154
38 80 51 4514257306
38 80 51 3600736418
38 80 51 4732094708
38 80 51 3617397775
38 80 51 4162460629
38 80 76 6501716812
38 80 76 6699279619
38 80 76 6413560018
38 80 76 5677377376
38 80 76 6367533875
38 80 76 5669075350
38 80 76 4994958828
38 80 76 5164757980
38 80 76 6490341673
38 80 76 6360489577
38 90 11 1125896735
38 90 11 1141299509
38 90 11 1133588500
38 90 11 1169661876
38 90 11 1195601590
38 90 11 1239182841
38 90 11 1186032001
38 90 11 1139012849
38 90 11 1240185687
38 90 11 1154381411
38 90 26 2371235639
38 90 26 2388549594
38 90 26 2269025742
38 90 26 2274374825
38 90 26 2412403645
38 90 26 2255165512
38 90 26 2621826121
38 90 26 2888108898
38 90 26 2261369045
38 90 26 2360419014
38 90 51 3814272060
38 90 51 4821762828
38 90 51 3892225057
38 90 51 3850830395
38 90 51 4760347596
38 90 51 5380699170
38 90 51 5608588981
38 90 51 4942024380
38 90 51 5060727566
38 90 51 4685027658
38 90 76 7009568306
38 90 76 7832933977
38 90 76 7840080912
38 90 76 6757979682
38 90 76 5812998082
38 90 76 6919062842
38 90 76 6602571476
38 90 76 6848776379
38 90 76 6061005968
38 90 76 8014368709
38 100 11 1218384798
38 100 11 1198314620
38 100 11 1184289316
38 100 11 1209183846
38 100 11 1193468886
38 100 11 1166348849
38 100 11 1148184293
38 100 11 1254451760
38 100 11 1194788622
38 100 11 1215673907
38 100 26 2675820719
38 100 26 2393072023
38 100 26 2449685568
38 100 26 2295135235
38 100 26 2311461311
38 100 26 2380041867
38 100 26 2413860658
38 100 26 2307013722
38 100 26 2429439197
38 100 26 2297061811
38 100 51 3798601575
38 100 51 4172569488
38 100 51 3965197180
38 100 51 4578786706
38 100 51 4605046304
38 100 51 3934583648
38 100 51 3834891772
38 100 51 4626989174
38 100 51 4805498333
38 100 51 3986537487
38 100 76 5757313827
38 100 76 5669330231
38 100 76 6589362135
38 100 76 7629577757
38 100 76 5921192980
38 100 76 6746868833
38 100 76 5603745384
38 100 76 10581073366
38 100 76 9253421971
38 100 76 7323075081
38 100 101 14671133216
38 100 101 11377952783
38 100 101 11438063673
38 100 101 10299681185
38 100 101 9448870889
38 100 101 10727570568
38 100 101 14200354952
38 100 101 9805608240
38 100 101 13726347908
38 100 101 13229288236
Clone this wiki locally