Securing UML information flow using flowUML

Journal of Research and Practice in Information Technology

Volumn 38, Issue 1, 2006, Pages 111-119

  Alghathbar, Khaled ^a   Farkas, Csilla ^b   Wijesekera, Duminda ^c,d  

^a KING SAUD UNIVERSITY   (Saudi Arabia)

^b The Department of Mechanical Engineering   (United States)

^c Krasnow Institute for Advanced Study   (United States)

^d GEORGE MASON UNIVERSITY   (United States)

Author keywords

Flow control; Logic; Policies; Unified Modelling Language

Indexed keywords

INFORMATION FLOW; LOGIC-BASED SYSTEM; SEQUENCE DIAGRAMS; UNIFIED MODELING LANGUAGE;

FLOW CONTROL; FORMAL LOGIC; INFORMATION TECHNOLOGY; LOGIC DESIGN; PUBLIC POLICY;

INFORMATION MANAGEMENT;

EID: 33644677490     PISSN: 1443458X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (15)

1. ALGHATHBAR, K. and WUESEKERA, D. (2003): authUML: A Three-phased framework to analyze access control specifications in Use Cases. In Proc. of the Workshop on Formal Methods in Security Engineering (FMSE). Washington D.C. October. ACM Press.
2. BELL, D. and LAPADULA, L. (1975): Secure computer system: United exposition and Multics interpretation. Technical Report, ESD-TR-75-306, MITRE Corp. MTR-2997. Bedford, MA.
3. BERTINO, E. and ATLURI, V. (1999): The specification and enforcement of authorization constraints in workflow management. ACM Transactions on Information Systems Security.
4. BOOCH, G., RUMBAUGH, J. and JACOBSON, I. (1999): The Unified Modeling Language User Guide. Addison-Wesley, Reading, MA.
5. CHEN, S., WIJESEKERA, D. and JAJODIA, S. (2003): FlexFlow: A flexible flow control policy specification framework. In Proceedings of the 17th Annual IFIP WG 113 Working Conference on Database and Applications Security. Estes Park, Colorado.
6. CHUNG, L., NIXON, B., YU, E. and MYLOPOULOS, J. (2000): Non-Functional Requirements in Software Engineering. Kluwer Academic Publishers.
7. DEVANBU, P. T. and STUBBLEBINE, S. (2000): Software engineering for security: A roadmap. In The Future of Software Engineering. FINKELSTEIN, A. (ed). ACM Press.
8. GELFOND, M. and LIFSCHITZ, V. (1988): The stable model semantics for logic programming. In Proceedings, 5th International Conference and Symposium on Logic Programming. Seattle, Wash. 1070-1080.
9. MYERS, A. (1999): JFlow: Practical mostly-static information flow control. In Proc. 26th ACM Symp. on Principles of Programming Languages (POPL). 228-241. San Antonio, TX.
10. NUSEIBEH, B., EASTERBROOK, S. and RUSSO, A. (2001): Making respectable in software development. Journal of Systems and Software, 56(11). Elsevier Science Publishers.
11. NUSEIBEH, B. and EASTERBROOK, S. (2000): Requirements engineering: A roadmap. In The Future of Software Engineering. FINKELSTEIN, A. (ed). ACM Press.
12. SAMARATI, P., BERTINO, E., CIAMPICHETTI, A. and JAJODIA, S. (1997): Information flow control in object-oriented systems. IEEE Transactions on Knowledge and Data Engineering. 9(4):524-538.
13. THE UNIFIED MODELING LANGUAGE VERSION 1.5 (2003). http://www.omg.org/uml/. Accessed in September 2003.
14. LODDERSTEDT, T., BASIN, D. and DOSER, J. (2002): SecureUML: A UML-Based Modeling Language for Model-Driven Security. In Proceedings of the 5th International Conference on The Unified Modeling Language, 426-441.
15. JURJENS, J. (2002): UMLsec: Extending UML for Secure Systems Development. In Proceedings of the 5th International Conference on The Unified Modeling Language, 412-425.