Improving security in NoSQL document databases through model-driven modernization

Abstract NoSQL technologies have become a common component in many information systems and software applications. These are focused on performance, enabling scalable processing of large volumes structured unstructured data. Unfortunately, most developments over consider security as an afterthought, putting at risk personal data individuals potentially causing severe economic loses well reputation crisis. In order to avoid these situations, companies require approach that introduces mechanisms into their without scrapping already in-place solutions restart all again the design process. Therefore, this paper we propose first modernization for introducing databases, focusing access control thereby improving associated Our analyzes existing solution organization, using domain ontology detect sensitive creating conceptual model database. Together with model, series issues related listed, allowing database designers identify must be incorporated solution. For each issue, our automatically generates proposed solution, consisting combination privilege modifications, new roles views improve control. test approach, apply process medical implemented popular document-oriented database, MongoDB. The great advantages that: (1) it takes account context system thanks introduction ontologies, (2) helps missing critical since analysis is performed automatically, (3) reduces effort costs automated steps process, (4) can used different document-based successful way by adjusting metamodel, (5) lined up known standards, hence application guidelines best practices.