Supporting security assurance in the context of evolution: Modular modeling and analysis with UMLsec

Proceedings of IEEE International Symposium on High Assurance Systems Engineering

Volumn , Issue , 2012, Pages 177-184

  Ruhroth, Thomas ^a   Jürjens, Jan ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

Modular Analysis Model; Secure Information Flow; UMLsec

Indexed keywords

ANALYSIS MODELS; DESIGN MODELS; MODEL BASED DEVELOPMENT; MODEL CHANGE; MODULAR ANALYSIS; MODULAR APPROACH; MODULAR MODELING; SECURE INFORMATION FLOW; SECURITY ASSURANCE; SECURITY REQUIREMENTS; SYSTEM EVOLUTION; UMLSEC;

NETWORK SECURITY; SYSTEMS ENGINEERING;

UNIFIED MODELING LANGUAGE;

EID: 84871955734     PISSN: 15302059     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HASE.2012.35     Document Type: Conference Paper

References (22)

1. M. Lehman, "Software's future: Managing evolution," IEEE Software, vol. 15, no. 1, pp. 40-44, 1998.
2. H. Lipson, "Evolutionary systems design: Recognizing changes in security and survivability risks," Carnegie Mellon Software Engineering Institute, Tech. Rep. CMU/SEI-2006-TN-027, September 2006.
3. J. Jürjens, Secure Systems Development with UML. Springer, 2005.
4. H. Mantel, "A uniform framework for the formal specification and verification of secure information flow," Ph.D. dissertation, Saarland University, Saarbrücken, Germany, 2003.
5. J. Jürjens, "Sound methods and effective tools for model-based security engineering with UML," in ICSE, 2005.
6. "UMLsecTool," 2001-2011, http://jan.jurjens.de/umlsectool.
7. J. Jürjens, J. Schreck, and P. Bartmann, "Model-based security analysis for mobile communications," in ICSE. ACM, 2008.
8. "CARiSMA," http://vm4a003.itmc.tudortmund.de/carisma/web/doku. php (Accessed July 2011).
9. H. Mantel, "Possibilistic definitions of security - an assembly kit," in Proceedings of the IEEE Computer Security Foundations Workshop. Cambridge, UK: IEEE Computer Society, July 3-5 2000, pp. 185-199.
10. D. E. Bell, "Looking Back at the Bell-La Padula Model," in Proceedings of the 21st Annual Computer Security Applications Conference, ser. ACSAC '05. Washington, DC, USA: IEEE Computer Society, 2005, pp. 337-351.
11. A. Schürr and F. Klar, "15 years of triple graph grammars," in Graph Transformations, ser. LNCS, H. Ehrig, R. Heckel, G. Rozenberg, and G. Taentzer, Eds. Springer Berlin / Heidelberg, 2008, vol. 5214, pp. 411-425.
12. G. Engels, C. Soltenborn, and H. Wehrheim, "Analysis of UML activities using dynamic meta modeling," in Formal Methods for Open Object-Based Distributed Systems, 9th IFIP WG 6.1 International Conference, FMOODS 2007, E. B. Bonsangue, Marcello M.; Johnsen, Ed., vol. 4468. Springer, June 2007, pp. 76-90.
13. M. Möller, E. Olderog, H. Rasch, and H. Wehrheim, "Integrating a formal method into a software engineering process with UML and Java," Formal Aspects of Computing, vol. 20, no. 2, pp. 161-204, March 2008.
14. H. Mantel, "Talk, RS3 Tutorial," summer 2010 in Buchenau.
15. M. M. Lehman, J. F. Ramil, P. D. Wernick, D. E. Perry, and W. M. Turski, "Metrics and Laws of Software Evolution - The Nineties View," in METRICS'97. Washington, DC, USA: IEEE Computer Society, 1997, pp. 20-32.
16. T. Ruhroth and H. Wehrheim, "Model evolution and refinement," Science of Computer Programming, vol. 77, no. 3, pp. 270 - 289, 2012.
17. T. Mens and T. D'Hondt, "Automating support for software evolution in UML," Automated Software Engineering Journal, vol. 7, no. 1, pp. 39-59, February 2000.
18. M. Mernik, J. Heering, and A. M. Sloane, "When and how to develop domain-specific languages," ACM Comput. Surv., vol. 37, no. 4, pp. 316-344, Dec. 2005.
19. S. Anonsen, "Experiences in modeling for a domain specific language," in UML Modeling Languages and Applications, ser. LNCS, N. Jardim Nunes, B. Selic, A. Rodrigues da Silva, and A. Toval Alvarez, Eds. Springer Berlin / Heidelberg, 2005, vol. 3297, pp. 187-197.
20. J. Eichler, "Lightweight modeling and analysis of security concepts," in Engineering Secure Software and Systems, ser. LNCS, U. Erlingsson, R. Wieringa, and N. Zannone, Eds. Springer Berlin / Heidelberg, 2011, vol. 6542, pp. 128-141.
21. J. Kienzle, J. Gray, D. Stein, W. Cazzola, O. Aldawud, and T. Elrad, "11th International Workshop on Aspect-Oriented Modeling," in Models in Software Engineering, ser. LNCS, H. Giese, Ed. Springer Berlin / Heidelberg, 2008, vol. 5002, pp. 1-6.
22. L. Fuentes and P. Sánchez, "Dynamic weaving of aspect-oriented executable UML models," in Transactions on Aspect- Oriented Software Development VI, ser. LNCS, S. Katz, H. Ossher, R. France, and J.-M. Jézéquel, Eds. Springer Berlin / Heidelberg, 2009, vol. 5560, pp. 1-38.