Automated analysis of security-design models

Information and Software Technology

Volumn 51, Issue 5, 2009, Pages 815-831

  Basin, David ^a   Clavel, Manuel ^b,c   Doser, Jürgen ^a   Egea, Marina ^c  

^a ETH ZURICH   (Switzerland)

^b IMDEA SOFTWARE INSTITUTE   (Spain)

^c UNIVERSIDAD COMPLUTENSE DE MADRID   (Spain)

Author keywords

Formal analysis; Metamodels; OCL; SecureUML; Security policies; UML

Indexed keywords

ACCESS CONTROL; DESIGN; LINGUISTICS; REAL TIME SYSTEMS; SECURITY SYSTEMS; SPECIFICATIONS;

FORMAL ANALYSIS; METAMODELS; OCL; SECUREUML; SECURITY POLICIES; UML;

XML;

EID: 60849104397     PISSN: 09505849     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.infsof.2008.05.011     Document Type: Article

References (16)

1. G.J. Ahn, M.E. Shin, Role-based authorization constraints specification using object constraint language, in: WETICE'01: Proceedings of the 10th IEEE International Workshops on Enabling Technologies, IEEE Computer Society, Washington, DC, USA, 2001.
2. D. Basin, M. Clavel, J. Doser, M. Egea, A metamodel-based approach for analyzing security-design models, in: Proceedings of the 10th International Conference on Model Driven Engineering Languages and Systems (MODELS 2007), Lecture Notes in Computer Science, vol. 4735, Springer-Verlag, 2007.
3. D. Basin, J. Doser, T. Lodderstedt, Model driven security for process-oriented systems, in: Proceedings of the Eighth ACM Symposium on Access Control Models and Technologies (SACMAT 2003), ACM Press, 2003.
4. Basin D.A., Doser J., and Lodderstedt T. Model driven security: from UML models to access control infrastructures. ACM Transactions on Software Engineering and Methodology 15 1 (2006) 39-91
5. R.J. Boulton, A. Gordon, M.J.C. Gordon, J. Harrison, J. Herbert, J.V. Tassel, Experience with embedding hardware description languages in HOL, in: Proceedings of the IFIP TC10/WG 10.2 International Conference on Theorem Provers in Circuit Design, North-Holland, 1992.
6. F.B. e Abreu, Using OCL to Formalize Object Oriented Metrics Definitions, Technical Report ES007/2001, FCT/UNL and INESC, Portugal. Available from: , June, 2001.
7. Ferraiolo D.F., Sandhu R.S., Gavrila S., Kuhn D.R., and Chandramouli R. Proposed NIST standard for role-based access control. ACM Transactions on Information and System Security 4 3 (2001) 224-274
8. G. Georg, I. Ray, R. France, Using aspects to design a secure system, in: ICECCS'02: Proceedings of the Eighth International Conference on Engineering of Complex Computer Systems, IEEE Computer Society, Washington, DC, USA, 2002.
9. J. Jürjens, Towards development of secure systems using UMLsec, in: H. Hussmann (Ed.), Fundamental Approaches to Software Engineering, (FASE/ETAPS 2001), Lecture Notes in Computer Science, vol. 2029, Springer-Verlag, 2001.
10. J. Jürjens, UMLsec: extending UML for secure systems development, in: J.-M. Jézéquel, H. Hussmann, S. Cook (Eds.), UML 2002 - The Unified Modeling Language, Lecture Notes in Computer Science, vol. 2460, Springer-Verlag, 2002.
11. Kleppe A., Bast W., Warmer J.B., and Watson A. MDA Explained: The Model Driven Architecture - Practice and Promise (2003), Addison-Wesley
12. Object Management Group, UML 2.0 OCL Specification, OMG document. Available from: , 2003.
13. Object Management Group, Unified Modeling Language: Infrastracture, Version 2.1.1, OMG document. Available from: , 2007.
14. K. Sohr, G.J. Ahn, M. Gogolla, L. Migge, Specification and validation of authorisation constraints using UML and OCL, in: Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS 2005), Lecture Notes in Computer Science, vol. 3679, Springer-Verlag, 2005.
15. H. Wang, Y. Zhang, J. Cao, J. Yang, Specifying role-based access constraints with object constraint language, in: Proceedings of the Sixth Asia-Pacific Web Conference (APWeb 2004), Lecture Notes in Computer Science, vol. 3007, Springer-Verlag, 2004.
16. Warmer J., and Kleppe A. The Object Constraint Language: Getting Your Models Ready for MDA. second ed. (2003), Addison-Wesley