Analyzing information flow control policies in requirements engineering

Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

Volumn , Issue , 2004, Pages 193-196

  Alghathbar, Khaled ^a   Wijesekera, Duminda ^b  

^a KING SAUD UNIVERSITY   (Saudi Arabia)

^b GEORGE MASON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SOFTWARE DESIGN; SOFTWARE DEVELOPMENT LIFE CYCLE; UNIFIED MODIFIED LANGUAGE (UML);

AUTOMATION; LOGIC PROGRAMMING; SECURITY OF DATA; SOFTWARE ENGINEERING;

INFORMATION ANALYSIS;

EID: 11244267296     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2004.1309167     Document Type: Conference Paper

References (15)

1. K. Alghathbar, D. Wijesekera. "authUML: A Three-phased framework to analyze access control specifications in Use Cases". In proc. of the Workshop on Formal Methods in Security Engineering, Washington, DC. Oct. 2003.
2. D. Bell and L. LaPadula. "Secure computer system: United exposition and Multics interpretation". Technical Report, , MITRE Corp. Bedford, MA, 1975.
3. E. Bertino and V. Atluri. "The specification and enforcement of authorization constraints in workflow management". ACM transactions on Information Systems Security, February 1999.
4. B. Boehm. Software engineering economics. Englewood Cliffs, NJ: Prentice-Hall. (1981)
5. G. Booch, J. Rumbaugh, and I. Jacobson. The Unified Modeling Language User Guide. Addison-Wesley, MA, 99.
6. L. Chung, B. Nixon, E. Yu, J. Mylopoulos. Non-Functional Requirements in Software Engineering. Kluwer Academic Publishers (2000).
7. D. D. Clark, D. R. Wilson. "A Comparison of Commercial and Military Computer Security Policies". In the proc. IEEE Symposium on Security and Privacy. 1987.
8. P. T. Devanbu and S. Stubblebine. "Software engineering for security:A roadmap". The Future of Software Engineering. ACM Press, 2000.
9. A. Myers. "JFlow: Practical mostly-static information flow control". In Proc. 26th ACM Symp. on Principles of Programming Languages, San Antonio, TX, Jan. 1999.
10. B. Nuseibeh and S. Easterbrook. "Requirements engineering: A roadmap". In A. Finkelstein, editor, The Future of Software Engineering. ACM Press, 2000.
11. Rational Rose, http://www.rational.com.
12. P. Samarati, E. Bertino, A. Ciampichetti, and S. Jajodia. "Information flow control in object-oriented systems. IEEE Transactions on Knowledge and Data Engineering", July-Aug. 1997.
13. The Unified Modeling Language version 1.5. http://www.omg.org/uml/. Accessed in September 2003.
14. D. Wijesekera, S. Jajodia, "Policy Algebras for Access Control - The predicate Case". In the Proc. 8th ACM Conference on Computer and Communications Security, Washington, DC, November 17-22, 2002.
15. J. Rushby. "Security Requirements Specifications: How and What?" In the proc. of Symposium on Requirements Engineering for Information Security. Indianapolis, IN. March, 2001.