Model-based security engineering with UML: Introducing security aspects

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4111 LNCS, Issue , 2006, Pages 64-87

  Jürjens, Jan ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SIMULATION; CONSTRAINT THEORY; FORMAL LANGUAGES; MATHEMATICAL MODELS; OBJECT ORIENTED PROGRAMMING; SYSTEMS ANALYSIS;

ASPECT-ORIENTED MODELING; SECURITY-CRITICAL SYSTEMS; SYSTEM SPECIFICATIONS; UNIFIED MODELING LANGUAGE (UML);

SECURITY SYSTEMS;

EID: 33749646163     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11804192_4     Document Type: Conference Paper

References (25)

1. [ABdBS04] E. Ábráham, M.M. Bonsangue, F.S. de Boer, and M. Steffen. Object connectivity and full abstraction for a concurrent calculus of classes. In ICTAC 2004, pages 37-51, 2004.
2. [Abs04] AbsInt. aicall. http://www.aicall.de/, 2004.
3. [AJ01] M. Abadi and J. Jürjens. Formal eavesdropping and its computational interpretation. In N. Kobayashi and B. C. Pierce, editors, Theoretical Aspects of Computer Software (4th International Symposium, TACS 2001), volume 2215 of LNCS, pages 82-94. Springer, 2001.
4. [BM03] P. Braun and F. Marschall. The BOTL tool, http://www4.in.tum.de/ ~marschal/botl, 2003.
5. [BS01] M. Broy and K. Stølen. Specification and Development of Interactive Systems. Springer, 2001.
6. [dBBSA04] F.S. de Boer, M.M. Bonsangue, M. Steffen, and E. Ábráham. A fully abstract semantics for UML components. In FMCO 2004, pages 49-69, 2004.
7. [dBKPR89] F.S. de Boer, J.N. Koek, C. Palamidessi, and J.J.M.M. Rutten. Control flow versus logic: a denotational and a declarative model for guarded Horn clauses. In MFCS 1989, pages 165-176, 1989.
8. [DHH02] D. Dams, W. Hesse, and G.J. Holzmann. Abstracting C with abC. In CAV 2002, pages 515-520, 2002.
9. [DY83] D. Dolev and A. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, IT-29 (2): 198-208, 1983.
10. [FELR98] R. B. France, A. Evans, K. Lano, and B. Rumpe. The UML as a formal modeling notation. Computer Standards & Interfaces, 19:325-334, 1998.
11. [FRGG04] R.B. France, I. Ray, G. Georg, and S. Ghosh. Aspect-oriented approach to early design modelling. IEE Proceedings - Software, 151(4):173-186, 2004.
12. [FSKdR05] H. Fecher, J. Schönborn, M. Kyas, and W.P. de Roever. 29 new unclarities in the semantics of UML 2.0 state machines. In ICFEM 2005, pages 52-65, 2005.
13. [Gur00] Y. Gurevich. Abstract state machines. In T. Rus, editor, 8th International Conference on Algebraic Methodology and Software Technology (AMAST 2000), volume 1816 of LNCS. Springer, 2000.
14. [HLN04] C. Haley, R. Laney, and B. Nuseibeh. Deriving security requirements from crosscutting threat descriptions. In 3rd International Conference on Aspect Oriented Software Development (AOSD'04). ACM, 2004.
15. [HS03] Ø. Haugen and K. Stølen. STAIRS - steps to analyze interactions with refinement semantics. In P. Stevens, editor, The Unified Modeling Language (UML 2003), volume 2863 of LNCS, pages 388-402. Springer, 2003. 6th International Conference.
16. [JH05] J. Jürjens and S.H. Houmb. Dynamic secure aspect modeling with UML: From models to code. In ACM / IEEE 8th International Conference on Model Driven Engineering Languages and Systems (MoDELS / UML 2005), LNCS. Springer, 2005.
17. [Jür01] J. Jürjens. Towards development of secure systems using UMLsec. In H. Hußmann, editor, 4th International Conference on Fundamental Approaches to Software Engineering (FASE), volume 2029 of LNCS, pages 187-200. Springer, 2001.
18. [Jür02] J. Jürjens. UMLsec: Extending UML for secure systems development. In J.-M. Jézéquel, H. Hußmann, and S. Cook, editors, 5th International Conference on the Unified Modeling Language (UML 2002), volume 2460 of LNCS, pages 412-425. Springer, 2002.
19. [Jür04] J. Jürjens. Secure Systems Development with UML. Springer, 2004.
20. [Jür05a] J. Jürjens. Code security analysis of a biometric authentication system using automated theorem provers. In 21st Annual Computer Security 'Applications Conference (ACSAC 2005). IEEE, 2005.
21. [Jür05b] J. Jürjens. Sound methods and effective tools for model-based security engineering with UML. In 27th International Conference on Software Engineering (ICSE 2005). IEEE, 2005.
22. [Jür06] J. Jürjens. Security analysis of crypto-based Java programs using automated theorem provers. In S. Easterbrook and S. Uchitel, editors, 21st IEEE/ACM International Conference on Automated Software Engineering (ASE 2006). ACM, 2006.
23. [OGO04] lu. Ober, S. Graf, and II. Ober. Validation of UML models via a mapping to communicating extended timed automata. In SPIN 2004, pages 127-145, 2004.
24. [UML03] UML Revision Task Force. OMG UML Specification v. 1.5. OMG Document formal/03-03-01. Available at http://www.omg.org/uml, March 2003.
25. [UML04] UMLsec group. Security analysis tool, 2004. http://www.umlsec. org.