Connecting security requirements analysis and secure design using patterns and UMLsec

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6741 LNCS, Issue , 2011, Pages 367-382

  Schmidt, Holger ^a   Jürjens, Jan ^a,b  

^a TU DORTMUND UNIVERSITY   (Germany)

^b Fraunhofer ISST ^*  (Germany)

Author keywords

architectural pattern; secure design; security requirement

Indexed keywords

ADVANCED MODELING; ARCHITECTURAL PATTERN; ARCHITECTURAL SECURITY; COMMON CRITERIA; ERROR PRONES; NON-TRIVIAL; SECURE DESIGN; SECURITY PROPERTIES; SECURITY REQUIREMENTS; SUB-PROBLEMS; SECURE DESIGNS;

ARCHITECTURAL DESIGN; INFORMATION SYSTEMS; REQUIREMENTS ENGINEERING; SOFTWARE ARCHITECTURE; SYSTEMS ENGINEERING; CRYPTOGRAPHY;

SOFTWARE DESIGN;

EID: 79960296459     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-21640-4_28     Document Type: Conference Paper

References (16)

1. Bryl, V., Massacci, F., Mylopoulos, J., Zannone, N.: Designing security requirements models through planning. In: Martinez, F.H., Pohl, K. (eds.) CAiSE 2006. LNCS, vol. 4001, pp. 33-47. Springer, Heidelberg (2006)
2. Choppy, C., Hatebur, D., Heisel, M.: Component composition through architectural patterns for problem frames. In: Proceedings of the Asia Pacific Software Engineering Conference (APSEC), pp. 27-34. IEEE Computer Society, Washington, DC, USA (2006)
3. Giorgini, P., Mouratidis, H.: Secure tropos: A security-oriented extension of the tropos methodology. International Journal of Software Engineering and Knowledge Engineering 17(2), 285-309 (2007)
4. Hall, J.G., Jackson, M., Laney, R.C., Nuseibeh, B., Rapanotti, L.: Relating software requirements and architectures using problem frames. In: Proceedings of the IEEE International Requirements Engineering Conference (RE), pp. 137-144. IEEE Computer Society, Los Alamitos (2002)
5. Heyman, T., Yskout, K., Scandariato, R., Joosen, W.: An analysis of the security patterns landscape. In: Proceedings of the International Workshop on Software Engineering for Secure Systems (SESS), pp. 3-10. IEEE Computer Society, Los Alamitos (2007)
6. Heyman, T., Yskout, K., Scandariato, R., Schmidt, H., Yu, Y.: The security twin peaks. In: Erlingsson, Ú., Wieringa, R., Zannone, N. (eds.) ESSoS 2011. LNCS, vol. 6542, pp. 167-180. Springer, Heidelberg (2011)
7. Jackson, M.: Problem Frames. In: Analyzing and structuring software development problems. Addison-Wesley, Reading (2001)
8. Jürjens, J.: Principles for Secure Systems Design. PhD thesis, University of Oxford (2002)
9. Massacci, F., Mylopoulos, J., Zannone, N.: An Ontology for Secure Socio- Technical Systems. Information Science Reference. In: Ontologies for Business Interaction, pp. 188-207 (2007)
10. Mouratidis, H., Jürjens, J.: From goal-driven security requirements engineering to secure design. International Journal of Intelligent Systems - Special issue on Goal-Driven Requirements Engineering 25(8), 813-840 (2010)
11. Pérez-Martínez, J.E., Sierra-Alonso, A.: UML 1.4 versus UML 2.0 as languages to describe software architectures. In: Oquendo, F., Warboys, B.C., Morrison, R. (eds.) EWSA 2004. LNCS, vol. 3047, pp. 88-102. Springer, Heidelberg (2004)
12. Pfleeger, C.P., Pfleeger, S.L.: Security In Computing, 3rd edn. Prentice Hall PTR, Englewood Cliffs (2003)
13. Rapanotti, L., Hall, J.G., Jackson, M., Nuseibeh, B.: Architecture-driven problem decomposition. In: Proceedings of the IEEE International Requirements Engineering Conference (RE), pp. 80-89. IEEE Computer Society, Los Alamitos (2004)
14. Schmidt, H.: A Pattern- and Component-Based Method to Develop Secure Software. Deutscher Wissenschafts-Verlag (DWV) Baden-Baden (April 2010)
15. Schmidt, H., Jürjens, J.: UMLsec4UML2 - adopting UMLsec to support UML2. Technical Report 838, Technical University of Dortmund (February 2011), http://hdl.handle.net/2003/27602
16. Shaw, M., Garlan, D.: Software Architecture. Perspectives on an Emerging Discipline. Prentice Hall PTR, Englewood Cliffs (1996)