Model transformations are touted to play a key role in Model Driven DevelopmentTM. Although well-established standards for creating metamodels such as the Meta-Object Facility exist, there is currently no mature foundation for specifying transformations among models. We propose a framework for the classification of several existing and proposed model transformation approaches. The classification framework is given as a feature model that makes explicit the different design choices for model transformations. Based on our analysis of model transformation approaches, we propose a few major categories in which most approaches fit.

/pdf/feature-based-survey-of-model-transformation-approaches-2hq9yv60ag.pdf

Feature-based survey of model transformation approaches

Nowadays, object-oriented meta-languages such as MOF (Meta-Object Facility) are increasingly used to specify domain-specific languages in the model-driven engineering community. However, these meta-languages focus on structural specifications and have no built-in support for specifications of operational semantics. In this paper we explore the idea of using aspect-oriented modeling to add precise action specifications with static type checking and genericity at the meta level, and examine related issues and possible solutions. We believe that such a combination would bring significant benefits to the community, such as the specification, simulation and testing of operational semantics of metamodels. We present requirements for such statically-typed meta-languages and rationales for the aforementioned benefits.

/pdf/weaving-executability-into-object-oriented-meta-languages-4k2ts37wcl.pdf

Weaving executability into object-oriented meta-languages

An attack graph is a succinct representation of all paths through a system that end in a state where an intruder has successfully achieved his goal. Today Red Teams determine the vulnerability of networked systems by drawing gigantic attack graphs by hand. Constructing attack graphs by hand is tedious, error-prone, and impractical for large systems. By viewing an attack as a violation of a safety property, we can use off-the-shelf model checking technology to produce attack graphs automatically: a successful path from the intruder's viewpoint is a counterexample produced by the model checker In this paper we present an algorithm for generating attack graphs using model checking as a subroutine. Security analysts use attack graphs for detection, defense and forensics. In this paper we present a minimization analysis technique that allows analysts to decide which minimal set of security measures would guarantee the safety of the system. We provide a formal characterization of this problem: we prove that it is polynomially equivalent to the minimum hitting set problem and we present a greedy algorithm with provable bounds. We also present a reliability analysis technique that allows analysts to perform a simple cost-benefit trade-off depending on the likelihoods of attacks. By interpreting attack graphs as Markov Decision Processes we can use the value iteration algorithm to compute the probabilities of intruder success for each attack the graph.

Two Formal Analyses of Attack Graphs

In their recent book, Mens and Demeyer state that Model-Driven Engineering introduces additional challenges for controlling and managing software evolution. Today, tools exist for generating model editors and for managing models with transformation, validation, merging and weaving. There is limited support, however, for model migration - a development activity in which instance models are updated in response to metamodel evolution. In this paper, we describe Epsilon Flock, a model-to-model transformation language tailored for model migration that contributes a novel algorithm for relating source and target model elements. To demonstrate its conciseness, we compare Flock to other approaches.

Model migration with epsilon flock

Fiacre was designed in the framework of the TOPCASED project dealing with model-driven engineering and gathering numerous partners, from both industry and academics. Therefore, Fiacre is designed both as the target language of model transformation engines from various models such as SDL, UML, AADL, and as the source language of compilers into the targeted verification toolboxes, namely CADP and Tina in the first step. In this paper, we present the Fiacre language. Then transformations from AADL to Fiacre are illustrated on a small example.

/pdf/fiacre-an-intermediate-language-for-model-verification-in-3nkg9v38k0.pdf

Fiacre: an Intermediate Language for Model Verification in the Topcased Environment

Domain specific languages for model transformation have recently generated significant interest in the model-driven engineering community The adopted QVT specification has normalized some scheme of model transformation language; however several different model transformation language paradigms are likely to co-exist in the near future, ranging from imperative to declarative (including hybrid) It remains nevertheless questionable how model transformation specific languages compare to more general purpose languages, in terms of applicability, scalability and robustness In this paper we report on our specific experience in applying an executable meta-language to the model transformation field

https://hal.inria.fr/inria-00000381/document

On Executable Meta-Languages applied to Model Transformations

The development and evolution of an advanced modeling environment for a Domain-Specific Modeling Language (DSML) is a tedious task, which becomes recurrent with the increasing number of DSMLs involved in the development and management of complex software-intensive systems. Recent efforts in language workbenches result in advanced frameworks that automatically provide syntactic tooling such as advanced editors. However, defining the execution semantics of languages and their tooling remains mostly hand crafted. Similarly to editors that share code completion or syntax highlighting, the development of advanced debuggers, animators, and others execution analysis tools shares common facilities, which should be reused among various DSMLs. In this tool demonstration paper, we present the execution framework offered by the GEMOC studio, an Eclipse-based language and modeling workbench. The framework provides a generic interface to plug in different execution engines associated to their specific metalanguages used to define the discrete-event operational semantics of DSMLs. It also integrates generic runtime services that are shared among the approaches used to implement the execution semantics, such as graphical animation or omniscient debugging.

/pdf/execution-framework-of-the-gemoc-studio-tool-demo-5co0pg3jaa.pdf

Execution framework of the GEMOC studio (tool demo)

Written by foremost experts in the field, Engineering Modeling Languages provides end-to-end coverage of the engineering of modeling languages to turn domain knowledge into tools.

The book provides a definition of different kinds of modeling languages, their instrumentation with tools such as editors, interpreters and generators, the integration of multiple modeling languages to achieve a system view, and the validation of both models and tools. Industrial case studies, across a range of application domains, are included to attest to the benefits offered by the different techniques. The book also includes a variety of simple worked examples that introduce the techniques to the novice user.

The book is structured in two main parts. The first part is organized around a flow that introduces readers to Model Driven Engineering (MDE) concepts and technologies in a pragmatic manner. It starts with definitions of modeling and MDE, and then moves into a deeper discussion of how to express the knowledge of particular domains using modeling languages to ease the development of systems in the domains.

The second part of the book presents examples of applications of the model-driven approach to different types of software systems. In addition to illustrating the unification power of models in different software domains, this part demonstrates applicability from different starting points (language, business knowledge, standard, etc.) and focuses on different software engineering activities such as Requirement Engineering, Analysis, Design, Implementation, and V&V.

Each chapter concludes with a small set of exercises to help the reader reflect on what was learned or to dig further into the examples. Many examples of models and code snippets are presented throughout the book, and a supplemental website features all of the models and programs (and their associated tooling) discussed in the book.

Engineering Modeling Languages: Turning Domain Knowledge into Tools

Attack trees are widely used in the fields of defense for the analysis of risks (or threats) against electronics systems, computer control systems or physical systems. Based on the analysis of attack trees, practitioners can define actions to engage in order to reduce or annihilate risks. A major barrier to support computer-aided risk analysis is that attack trees can become largely complex and thus hard to specify. This paper is a first step towards a methodology, formal foundations as well as automated techniques to synthesize attack trees from a high-level description of a system. Attacks are expressed as a succession of elementary actions and high-level actions can be used to abstract and organize attacks into exploitable attack trees. We describe our tooling support and identify open challenges for supporting the analysis of risks.

https://hal.inria.fr/hal-01064645/document

Towards Synthesis of Attack Trees for Supporting Computer-Aided Risk Analysis

L'Ingenierie Dirigee par les Modeles (IDM), ou Model Driven Engineering (MDE) en anglais, s'inscrit dans l'evolution des techniques pour le developpement de systemes informatiques afin d'en maitriser leurs complexites en se concentrant sur une preoccupation plus abstraite que la programmation classique. En s'appuyant sur des approches generatives, il s'agit d'engendrer tout ou partie d'une application a partir de modeles. Un modele est une abstraction, une simplification d'un systeme qui est necessaire et suffisante pour comprendre un aspect particulier du systeme modelise et repondre aux questions que souleve cet aspect du systeme. Un systeme peut etre decrit par differents modeles lies les uns aux autres, et exprime chacun a l'aide d'un langage de modelisation dedie (Domain Specific Modeling Languages - DSML). Le principe est d'utiliser autant de langages de modelisation differents que les aspects chronologiques ou technologiques du developpement du systeme le necessitent. L'activite consistant a definir ces DSML (la syntaxe et la semantique), appelee metamodelisation, est donc une problematique cle de l'IDM. En outre, les autres problematiques cles de l'IDM consistent a rendre les modeles construits operationnels (pour la simulation, la generation de code, de documentation ou de test, la validation, la verification, l'execution, etc.) a l'aide de composition et de transformation de modele. A la fois un cours et un tutoriel, cet ouvrage offre une approche didactique et pragmatique d'apprentissage de l'IDM. Nous presentons dans la premiere partie les principes cles de cette nouvelle ingenierie. Nous introduisons une description precise de l'etat des connaissances de maniere a aborder les concepts avances de l'IDM, ainsi que les motivations et l'etendue du bouleversement attendu dans l'ingenierie du logiciel. La deuxieme partie aborde ensuite les differentes etapes d'un developpement dirige par les modeles en les illustrant au travers d'un exemple concret. Chaque etape est decrite de maniere a presenter l'etat de la pratique et introduire certains des outils actuellement disponible.

https://hal.inria.fr/hal-00648489/document

Didier Vojtisek

Papers

On Executable Meta-Languages applied to Model Transformations

Execution framework of the GEMOC studio (tool demo)

Engineering Modeling Languages: Turning Domain Knowledge into Tools

Towards Synthesis of Attack Trees for Supporting Computer-Aided Risk Analysis

Ingénierie Dirigée par les Modèles : des concepts à la pratique...