Towards a business process-driven framework for security engineering with the UML

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2851, Issue , 2003, Pages 381-395

  Vivas, José L ^a   Montenegro, José A ^b   López, Javier ^b  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

^b UNIVERSITY OF MÁLAGA   (Spain)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY OF DATA;

BUSINESS MODELS; BUSINESS PROCESS; EMPIRICAL STUDIES; END USERS; INTEGRATION OF SECURITY; SECURITY ENGINEERING; SECURITY NOTION; SECURITY-CRITICAL;

SECURITY SYSTEMS;

EID: 35248832632     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/10958513_29     Document Type: Article

References (34)

1. http://www.casenet-eu.org.
2. K. Allenby and T. Kelly. Deriving safety requirements using scenarios. In Fifth IEEE International Symposium on Requirements Engineering (RE '01), pages 228-235. IEEE Computer Society Press, 2001.
3. Ross J. Anderson. Why cryptosystems fail. Communications of the Association for Computing Machinery, 37(11):32-40, November 1994.
4. Gerald Brose, Manuel Koch, and Klaus-Peter Löhr. Integrating security policy design into the software development process. Technical Report B-01-06, Institut für Informatik, Freie Universität Berlin, November 2001.
5. M. Chaudron, K. van Hee, and L. Somers. Use cases as workflows. Lecture Notes in Computer Science, 2678:88-103, 2003.
6. L. Chung. Dealing with security requirements during the development of information systems. Lecture Notes in Computer Science, 685:234-??, 1993.
7. P. Coad. Object-oriented patterns. Communications of the ACM, 35(9):153-159, September 1993.
8. Premkumar T. Devanbu and Stuart G. Stubblebine. Software engineering for security. In Proceedings of the 22th International Conference on Software Engineering (ICSE-00), pages 227-240, NY, June 4-11 2000. ACM Press.
9. Gurpreet Dhillon. Managing Information System Security. Macmillan education, Limited, 1997.
10. OMG Document. OMG XML Metadata Interchange (XMI)Specification, v1.2, 2002.
11. OMG Document. Initial Response to UML 2.0 OCL RFP ad/ 00-09-03 (UML 2.0 OCL), 2003.
12. Hans-Erik Eriksson and Magnus Penker. Business Modelling with UML: Business Patterns at Work. John Wiley & Sons, 2000.
13. David C. Fallside. XML Schema, W3C Recommendation, 2001.
14. Erich Gamma, Richard Helm, Ralph Johnson, and John Vlissides. Design patterns: Abstraction and reuse of object-oriented design. Lecture Notes in Computer Science, 707:406-431, 1993.
15. Erich Gamma, Richard Helm, Ralph Johnson, and John Vlissides. Design Patterns. Addison Wesley, Reading, Mass., 1995.
16. Giuseppe De Giacomo, Yves Lésperance, and Hector J. Levesque. ConGolog, A concurrent programming language based on situation calculus. Artificial Intelligence, 121(1-2):109-169, 2000.
17. J. Hernández and J. Pinto. Especificación formal de protocolos criptográficos en cálculo de situaciones. Novatica, 143:57-63, 2000.
18. Ivar Jacobson, James Rumbaugh, and Grady Booch. The Unified Software Development Process. Object Technology Series. Addison-Wesley, Reading/MA, 1999.
19. Jan Jürjens. Towards development of secure systems using UMLsec. Lecture Notes in Computer Science, 2029, 2001.
20. M. Koubarakis and D. Plexousakis. A formal framework for business process modeling and design. Information Systems, 27(5):299-319, 2002.
21. Yves Lespérance, Hector J. Levesque, and Raymond Reiter. A situation calculus approach to modeling and programming agents. In Michael J. Wooldridge and A. Rao, editors, Foundations of Rational Agency, pages 275-299. Kluwer Academic Publishers, Dordrecht, 1999.
22. J. McCarthy and P. J. Hayes. Some philosophical problems from the standpoint of artificial intelligence. Machine Intelligence, 4:463-502, 1969.
23. J. McDermott and C. Fox. Using abuse case models for security requirements analysis. In 15th Annual Computer Security Applications Conference, (ACSAC '99), 1999.
24. John Mylopoulos, Lawrence Chung, and Brian Nixon. Representing and using nonfunctional requirements: A process-oriented approach. IEEE Transactions on Software Engineering, 18(6):483-497, June 1992. Special Issue on Knowledge Representation and Reasoning in Software Engineering.
25. Alexander W. Röhm, Gaby Herrmann, and Günther Pernul. A language for modelling secure business transactions. In IEEE Annual Computer Security Application Conference (ACSAC'99), Phoenix, USA, December 1999.
26. John Rushby. Security requirements specifications: How and what? In Symposium on Requirements Engineering for Information Security (SREIS), Indianapolis, IN, March 2001.
27. R. Scherl, H. Levesque, and Y. Lesprance. The situation calculus with sensing and indexical knowledge. In Moshe Koppel and Eli Shamir, editors, Proceedings of BISFAI'95: The Fourth Bar-Ilan Symposium on Foundations of Artificial Intelligence, pages 86-95, Israel, 1995. Ramat Gan and Jerusalem.
28. Richard B. Scherl and Hector J. Levesque. The frame problem and knowledge-producing actions. In Richard Fikes and Wendy Lehnert, editors, Proceedings of the Eleventh National Conference on Artificial Intelligence, pages 698-695, Menlo Park, California, 1993. American Association for Artificial Intelligence, AAAI Press.
29. Bruce Schneier. Secrets and Lies: Digital Security in a Networked World. John Wiley and Sons, Inc., New York, NY, USA, 2000.
30. M. Scumacher and U. Roedig. Security engineering with patterns. In Pattern Languages of Programs 2001, Monticello, IL, 2001.
31. Guttorm Sindre and Andreas L. Opdahl. Eliciting security requirements by misuse cases. In Proc. TOOLS Pacific 2000, pages 174-183, November 2000.
32. Mikko Siponen. Designing secure information systems and software. Academic dissertation, University of Oulo, 2002.
33. Mikko Siponen and Richard Baskerville. A new paradigm for adding security into is development methods. In Jan H.P. Eloff, Les Labuschagne, Rossouw von Solms, and Gurpreet Dhillon, editors, Advances in Information Security Management & Small Systems Security, pages 99-111. Kluwer Academic Publishers, 2001.
34. R. Vaugh, R. Henning, and K. Fox. An empiricakl study of industrial security engineering practices. Journal of Systems and Software, November 2001.