Abstract

In this talk we discuss a very promising instance of model-driven security: the full generation data-centric web applications with fine grained access control. We describe the modeling concepts and languages employed. We work through a case study where we generate a security-aware chatroom web application. We also present a toolkit that supports the construction of data models, security models, and web-based GUI models, and generates, from these models, complete, deployable, web  applications.