A metamodel-based approach for analyzing security-design models

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4735 LNCS, Issue , 2007, Pages 420-435

  Basin, David ^a   Clavel, Manuel ^b   Doser, Jürgen ^a   Egea, Marina ^b  

^a ETH ZURICH   (Switzerland)

^b UNIVERSIDAD COMPLUTENSE DE MADRID   (Spain)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER AIDED SOFTWARE ENGINEERING; CONSTRAINT THEORY; DISTRIBUTED COMPUTER SYSTEMS; SECURITY OF DATA; UNIFIED MODELING LANGUAGE;

OBJECT CONSTRAINT LANGUAGE; SECURITY-DESIGN MODELS;

METADATA;

EID: 38049059202     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-75209-7_29     Document Type: Conference Paper

References (14)

1. Ahn, G.J., Shin, M.E.: Role-based authorization constraints specification using Object Constraint Language. In: WETICE '01. Proceedings of the 10th IEEE International Workshops on Enabling Technologies, pp. 157-162. IEEE Computer Society, Washington, DC, USA (2001)
2. Basin, D.A., Doser, J., Lodderstedt, T.: Model driven security: From UML models to access control infrastructures. ACM Trans. Softw. Eng. Methodol. 15(1), 39-91 (2006)
3. Boulton, R.J., Gordon, A., Gordon, M.J.C., Harrison, J., Herbert, J., Van Tassel, J.: Experience with Embedding Hardware Description Languages in HOL. In: Proceedings of the IFIP TC10/WG 10.2 International Conference on Theorem Provers in Circuit Design, pp. 129-156. North-Holland, Amsterdam (1992)
4. Brito e Abreu, F.: Using OCL to formalize object oriented metrics definitions. Technical Report ES007/2001, FCT/UNL and INESC, Portugal (June 2001), available at http ://ctp.di.fct.unl.pt/QUASAR/Resources/Papers/others/ MOOD.OCL.pdf
5. Ferraiolo, D.F., Sandhu, R.S., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for Role-Based Access Control. ACM Trans. Inf. Syst. Secur. 4(3), 224-274 (2001)
6. Georg, G., Ray, I., France, R.: Using aspects to design a secure system. In: ICECCS '02. Proceedings of the Eighth International Conference on Engineering of Complex Computer Systems, pp. 117-126. IEEE Computer Society Press, Washington, DC, USA (2002)
7. Jürjens, J.: Towards development of secure systems using UMLsec. In: Hussmann, H. (ed.) ETAPS 2001 and FASE 2001. LNCS, vol. 2029, pp. 187-200. Springer, Heidelberg (2001)
8. Jürjens, J.: UMLsec: Extending UML for secure systems development. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 412-425. Springer, Heidelberg (2002)
9. Kleppe, A., Bast, W., Warmer, J.B., Watson, A.: MDA Explained: The Model Driven Architecture-Practice and Promise. Addison-Wesley, Reading (2003)
10. Lodderstedt, T., Basin, D.A., Doser, J.: SecureUML: A UML-based modeling language for model-driven security. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 426-441. Springer, Heidelberg (2002)
11. Object Management Group. Object Constraint Language specification, version 2.0 (May 2006)
12. Sohr, K., Ahn, G.J., Gogolla, M., Migge, L.: Specification and validation of authorisation constraints using UML and OCL. In: di Vimercati, S.d.C., Syverson, P.F., Gollmann, D. (eds.) ESORICS 2005. LNCS, vol. 3679, pp. 64-79. Springer, Heidelberg (2005)
13. Wang, H., Zhang, Y., Cao, J., Yang, J.: Specifying Role-Based Access Constraints with Object Constraint Language. In: Yu, J.X., Lin, X., Lu, H., Zhang, Y. (eds.) APWeb 2004. LNCS, vol. 3007, pp. 687-696. Springer, Heidelberg (2004)
14. Warmer, J., Kleppe, A.: The Object Constraint Language: Getting Your Models Ready for MDA, 2nd edn. Addison-Wesley, Reading (2003)