Eunjee SongComputer Science Department

Baylor UniversityOctober 3, 2008

Software Engineering Research at Baylor

2

Education Background Ph.D. Computer Science, Colorado State University,

May 2007 Dissertation title: An Aspect-based Approach to Modeling

Access Control Policies Advisor: Dr. Robert France, Co-Advisor: Dr. Indrakshi Ray

M.S. Computer Science, Colorado State University, August 2001. M.S. report title: A Meta-Modeling Approach to Precise

Specification of Pattern Properties Advisor: Dr. Robert France

B.S. Computer Engineering, Seoul National University, Korea, February 1991

B.S. Architecture, Seoul National University, Korea, February 1988

3

Industry Experience IBM Korea Inc., Seoul, Korea, Software

Engineer, Jan. 1991 – Feb. 1996, Service business and consulting based on

executive information system customization (1995-1996),

Business Application System/400 (1993-1995), Hospital Information System (MedSolution)

Series (1991-1993) Qwest Telecommunication, Denver, CO,

Summer Research Intern, Summer 2001 Project Title: Development of Repository-based

Reuse Infrastructures.

4

Teaching at Baylor

Advanced Software Engineering (CSI5v93) Software Engineering (CSI5324)

Principles of Software Design (CSI3342) Discrete Structures (CSI2350)

Software Engineering II (CSI3372): Spring ‘09 Software Project Planning (CSI3374): Fall ‘09

5

Research Interests

Software Engineering with emphasis on applying aspect-oriented

modeling (AOM) techniques to software security concerns

Related Topics Model-Driven Engineering (MDE) Aspect-oriented Software Development

(AOSD) Model Verification Pattern Research

6

S_2

S_22

S

S_2C

S_1

S_21S_22S_21

1 1

Secondary Actor

Use Case 1

Primary Actor

Use Case 2

Use Case 3

INFORMALGRAPHICALLANGUAGES

PRODUCT CODE

PRODUCTREQUIREMENTS

MIDDLEWARE, OS,PLATFORM

UNIT TEST

“Old” Software Development Process

Source: taken from slides by Dr. T. Weigert, @ U. of Missouri-Rolla

7

PRODUCT CODEUNIT TEST

MIDDLEWARE, OS,PLATFORM

ERROR-PRONEAND SLOW;

DIFFICULT TOREUSE

S_2

S_22

S

S_2C

S_1

S_21S_22S_21

1 1

Secondary Actor

Use Case 1

Primary Actor

Use Case 2

Use Case 3

INFORMALGRAPHICALLANGUAGES

INFORMALITYAND IMPRECISION

LEAD TO MISUNDER-STANDINGS

LONG DELAY TOREPAIR DEFECTS

ESCAPINGINSPECTION

PRODUCTREQUIREMENTS

DEFECTSREPAIRED ATCODE LEVEL

“Old” Software Development Process

Source: taken from slides by Dr. T. Weigert, @ U. of Missouri-Rolla

8

PRODUCT CODEUNIT TEST

VERIFICATION

Model-Driven Engineering VisionSTART

-

alway s takes too long

MEETING

PRESENT ARGUMENTS

COMPANY X OPINION

MOTOROLA OPINION

THROW OUT IDEA

COMPANY Y OPINION

AGREESUPERIOR ARGUMENT

COFFEE BREAK

where the real work is done

PROPOSE DECISION

MEETING AGREES

LUNCHwell deserv ed

MOTOROLAWITH

value;_ptr *s;

sll_ptr *ptr1, *ptr2 = s;if (value == s->car) {

s = s->next;free(ptr2);

} else {ptr1 = ptr2;while (((ptr2 = ptr2->next)!=NU

&& (!found))if (value == ptr2->car) {

found = TRUE;ptr1->next = ptr2->next;free(ptr2);

} else ptr1 = ptr2;}

STANDARDDESIGN

NOTATIONS

CODE GENERATOR

UK USA RMTR

air_in

taxi_in

taxi_out

air_out

MIDDLEWARE, OS,PLATFORM

PRODUCTREQUIREMENTS

Developdomain-specific

notations

Developverificationtechnology Develop

code generators

Source: taken from slides by Dr. T. Weigert, @ U. of Missouri-Rolla

9

Research Overview - Verifiable Composition -

access control aspect model application

model

domain name space

model element names

bindingvalues

context-specific aspect model

instantiate

Propertyto be verified

verifiablecomposition

proofobligation

composed model

Overview

10

Aspect-Oriented Modeling

service logging aspect

ba c dwoven model

attack model

simulate threat scenario on

ba c

access control aspect

a b cprimary model

woven model

compose with

to producecompose with

to produce

11

12

Published Journal Articles "Checking Policy Enforcement in an Access Control Aspect

Model", Information, An International Interdisciplinary Journal, Special Issue on Convergence Computing, Vol. 11, No.5, September 2008, International Information Institute.

"Using UML to Model Relational Database Operations", Computer Standards & Interfaces, Volume 29, Issue 3, Elsevier, March 2007, pp. 343-354.

"Directives for Composing Aspect-Oriented Design Class Models", Transactions on Aspect-Oriented Software Development, LNCS Volume 3880, Springer-Verlag, pp. 75-105, 2006.

"UML-Based Pattern Specification Technique", IEEE Transactions on Software Engineering. Vol. 30, number 3, pp 193-206, March 2004.

"A Metamodeling Approach to Pattern-based Model Refactoring", IEEE Software Special Issue on Model-Driven Development, Vol.20. No.5. September/October 2003.

13

Internal/External GrantsAwarded Aspect Oriented Design of Trustworthy Software, University

Research Committee (URC) grant of Baylor University, 6/1/2007-5/31/2008 (PI)

New faculty start-up grant from Baylor University, 7/14/2006 –5/31/2009 (PI)

Proposal under revision Verifiable Composition of Access Control and Application

Features, submitted to National Science Foundation (NSF) Cyber Trust (CT) program, 1/01/2009 – 12/31/2011

Proposal under preparation “Trustworthy aspect-orientation”, National Science Foundation

(NSF), Trustworthy Computing, CISE Cross-Cutting Programs. “Two-way oblivious support in Aspect-Oriented Modeling”, IBM

Austin Center for Advanced Studies (CAS) & IBM Collaboration Research Grant.