Integrating and automating security engineering in UML

Proceedings of the IASTED International Conference on Communication, Network, and Information Security

Volumn , Issue , 2003, Pages 97-102

  Maña, Antonio ^a   Montenegro, J A ^a   Ray, Diego ^a   Sánchez, Francisco ^a   Yagüe, Mariemma ^a  

^a UNIVERSITY OF MÁLAGA   (Spain)

Author keywords

Secure Software Process; Security Engineering; Semantic Metamodels; UML

Indexed keywords

COMPUTER SOFTWARE; ELECTRONIC COMMERCE; PROJECT MANAGEMENT; PUBLIC POLICY; SEMANTICS; SOFTWARE ENGINEERING; XML;

SECURE SOFTWARE PROCESS; SECURITY ENGINEERING; SEMANTIC METAMODELS; UNIFIED MODELING LANGUAGE (UML);

SECURITY OF DATA;

EID: 2642562842     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. T. Tryfonas, E. Kiountouzis, and A. Poulymenakou. Embedding security practices in contemporary information systems development approaches. Information Management & Computer Security (9):4, 2001, pp 183-197.
2. R. Vaughn, R. Henning, and K. Fox. An empirical study of industrial security engineering practices. Journal of Systems and Software, Nov. 2001.
3. D. Basin, J. Dose, and T. Lodderstedt. Model Driven Security for Process-Oriented Systems. Proc. 8th ACM Symposium on Access Control Models and Technologies, 2003.
4. D. Basin and J. Doser. SecureUML: A UML-Based Modeling Language for Model-Driven Security. Proc. 5th International Conference on the Unified Modeling Language, 2002.
5. J. Jürjens. Towards development of secure systems using UMLsec. Lecture Notes in Computer Science 2029, 2001.
6. P. T. Devanbu and S. G. Stubblebine. Software engineering for security. Proc. 22th Int. Conference on Software Engineering (ICS-00), 2000.
7. J. Castro, M. Kolp, and J. Mylopoulos. A requirements-driven development methodology. Proc. 13th Int. Conf. on Advanced Information Systems Engineering, CAiSE'01, 2001.
8. H. Mouratidis, P. Giorgini, and G. Manson. Integrating Security and Systems Engineering: Towards the Modelling of Secure Information Systems. Proc. 15th Conference On Advanced Information Systems Engineering (CAiSE*03), 2003.
9. R. France, A. Evans, K. Lano, and B. Rumpe. The UML as a formal modeling notation. Proc. Workshop on Object-Oriented Behavioral Semantics, 1997
10. J. McDermott and C. Fox. Using abuse case models for security requirements analysis. Proc. 15th Annual Computer Security Applications Conference (ACSAC'99), 1999
11. UML Precise Group, http://www.puml.org.
12. Object Management Group. Model Driven Architecture (MDA). Document number ormsc/2001-07-01. Available online at http://www.omg.org/docs/ormsc/01-07-01. pdf
13. Object Management Group. Unified Modeling Language (UML) Specification. Available online at http://www.omg.org/technology/documents/ modeling_spec_catalog.htm#UML
14. J. Jürjens. Towards development of secure systems using UMLsec. Lecture Notes in Computer Science 2029, 2001.
15. S. Gurgüens, P. Ochsenschläger, C. Rudolph. Role based specification and security analysis of cryptographic protocols using asynchronous product automata (APA). GMD (German National Research Center for Information Technology) Tech report 151, 2001, available online at http://www.gmd.de/publications/report/0151/Text.pdf
16. P. Ochsenschläger, J. Repp, R. Rieke. The SH-Verification Tool. Institute for Secure Telecooperation, GMD (German National Research Center for Information Technology). Available online at http://www.sit.fhg.de/english/META/ meta_publications/doc/flairs-2000b.pdf