This repository contains all files to analyze the confidentiality of the BWUniCluster based on architectural modeling. In non-trivial software systems, multiple components are often glued together using small code snippets: Glue Code. To analyze the confidentiality of such architectures with Palladio, we applied a data flow-based analysis.
This repository contains all model files to run the analysis. For getting started, follow these steps:
- Download and install Eclipse Modeling Tools 2021-12.
- Use the included
install.p2fto install all required software in Eclipse - Clone or download this repository, e.g., by using the git CLI:
git clone https://github.com/kit-sdq/GlueCodes-CaseStudy.git - Import the downloaded folder as existing project in Eclipse
- To run the analysis, create a new
PCM Confidentiality (DSL)run configuration and select the included files
The modeling is based on Palladio with data flow-specific annotations, e.g., data operations and characteristics.
The model is based on publicly available information, e.g., the architecture description.
We modeled the different types of nodes (login nodes, admin nodes, file server nodes) as resources and allocated multiple components that provide user and admin services.
We analyzed several documented data flow constraints such as user authentication and access restriction to internal nodes.
See query.DCPDSL for details.