A model-driven approach to architecting secure software

19th International Conference on Software Engineering and Knowledge Engineering, SEKE 2007

Volumn , Issue , 2007, Pages 535-540

  Oladimeji, Ebenezer A ^a   Supakkul, Sam ^b   Chung, Lawrence ^b  

^a IT Verizon Communications   (United States)

^b The University of Texas at Dallas   (United States)

Author keywords

Architectural models; Security conflicts; Security policies; Security traceability; Software architecture; Software security

Indexed keywords

ARCHITECTURAL MODELS; SECURITY CONFLICTS; SECURITY POLICY; SECURITY TRACEABILITY; SOFTWARE SECURITY;

KNOWLEDGE ENGINEERING; SECURITY SYSTEMS; SOFTWARE ARCHITECTURE; VISUAL LANGUAGES;

SECURITY OF DATA;

EID: 60849113797     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. R. Crook, D. Ince, L. Lin, and B. Nuseibeh. Security Requirements EngineeringüWhen Anti-Requirements Hit the Fan. In Proc. of Int'l Requirements Engineering Conference, 2002.
2. N. Damianou, N. Dulay, E. Lupu, and M. Sloman. The Ponder Policy Specification Language. Policy Workshop 2001, Bristol, U.K., Springer-Verlag, LNCS, Jan. 2001.
3. Y. Deng, J. Wang, J. J. P. Tsai, and K. Beznosov. An Approach for Modeling and Analysis of Security System Architectures. IEEE Transactions on Knowledge and Data Engineering, 15(5):1099- 1119, Sept/Oct. 2003.
4. P. T. Devanbu and S. Stubblebine. Software Engineering for SecurityüA Roadmap. In The Future of Software Engineering. Special volume of the proceedings of ICSE'2000, pages 227-239, June 2000.
5. D. Garlan. Software ArchitectureüA Roadmap. In The Future of Software Engineering. Special volume of the proceedings of ICSE'2000, pages 91-101, June 2000.
6. D. Garlan, S.-W. Cheng, and A. J. Kompanek. Reconciling the Needs of Architectural Description with Object-Modeling Notations. Science of Computer Programming. Special Issue on Unified Modeling Language, 44(1):23-49, July 2002.
7. C. Hofmeister, R. L. Nord, and D. Soni. Describing Software Architecture with UML. In Proc. of the 1st Working IFIP Conf. on Software Architecture (WICSA1), Feb. 1999.
8. C. D. Jensen. Secure Software Architectures. In Proceedings of the 8th Nordic Workshop on Programming Environment Research, pages 239-246, Aug. 1998.
9. J. Jrjens. UMLsecüExtending UML for Secure Systems Development. UML 2002, LNCS 2460, Springer-Verlag, 2002.
10. L. Kagal. ReiüA Policy Specification Language. PhD thesis, CSEE Department, University of Maryland, Baltimore County, Baltimore, MD 21250, 2005.
11. T. Lodderstedt, D. Basin, and J. Doser. SecureUMLüA UMLBased Modeling Language for Model-Driven Security. UML 2002, LNCS 2460, Springer-Verlag, pages 426-441, 2002.
12. E. Lupu and M. Sloman. Conflicts in Policy-based Distibuted Systems Management. Transactions on Software Engineering, 25(6):852-869, Nov. 1999.
13. N. Medvidovic and D. S. Rosenblum. Assessing the Suitability of a Standard Design Method for Modeling Software Architectures. In Proc. of the 1st Working IFIP Conf. on Software Architecture (WICSA1), San Antonio, TX, Feb. 1999.
14. H. Muccini, P. Inverardi, and P. Pelliccione. DUALLYüPutting in Synergy UML 2.0 and ADLs. In Proceedings of the 5th Working IEEE/IFIP Conference on Software Architecture (WICSA'05), pages 251-252, LAquila, Italy, Nov. 2005.
15. S. Myagmar, A. Lee, and W. Yurcik. Threat Modeling as a Basis for Security Requirements. In Proceedings of the Symposium on Requirements Engineering for Information Security (SREIS'05), Paris, France, Aug. 2005.
16. E. A. Oladimeji and L. Chung. Representing Security Goals, Policies and Objects. In Proc. of the 5th IEEE/ACIS International Conference on Computer and Information Science (ICIS'06, pages 160-167, Honolulu, Hawaii, July 2006.
17. J. J. Pauli and D. Xu. Misuse Case-Based Design and Analysis of Secure Software Architecture. In Proceedings of the Int. Conference on Information TechnologyüCoding and Computing (ITCC'05). IEEE CS Press, April 2005.
18. J. Rushby. Security Requirements SpecificationsüHow and What. In Proc. of the IEEE Symposium on Requirements Eng. for Information Security (SREIS), Indianapolis, March 2001.