Security-critical system development with extended use cases

Proceedings - Asia-Pacific Software Engineering Conference, APSEC

Volumn 2003-January, Issue , 2003, Pages 478-487

  Popp, G ^a   Jurjens J ^a   Wimmel, G ^a   Breu, R ^b  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

^b UNIVERSITY OF INNSBRUCK   (Austria)

Author keywords

[No Author keywords available]

Indexed keywords

HYBRID SYSTEMS; OBJECT ORIENTED PROGRAMMING; SOFTWARE ENGINEERING; UNIFIED MODELING LANGUAGE;

BEHAVIORAL MODEL; METHODICAL APPROACH; OBJECT ORIENTED MODEL; SECURE SYSTEM; SECURITY ASPECTS; SECURITY REQUIREMENTS; SECURITY-CRITICAL; SYSTEM DEVELOPMENT;

MODELING LANGUAGES;

EID: 84944683046     PISSN: 15301362     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/APSEC.2003.01254403     Document Type: Conference Paper

References (20)

1. B. Blobel, P. Pharow, and F. Roger-France. Security and Design Based on a General Conceptual Security Model and UML. In HPCN Europe, 1999.
2. Ruth Breu. Konzepte, Techniken und Methodik des objekto-rientierten Entwurfs - Ein integrierter Ansatz. Professorial thesis, Technische Universität München, November 1998.
3. G. Brose, M. Koch, and K.-P. Löhr. Integrating access control design into the software development process. In Integrated Design and Process Technology (IDPT), 2002.
4. Common criteria for information technology security evaluation version 2.1. Technical report, August 1999. Avilable from http://www.commoncriteria.org/docs/index.html.
5. D. F. D'Souza and A. C. Wills. Objects, Components, and Frameworks With UML: The Catalysis Approach. Addison Wesley Publishing Company, 1998.
6. E. B. Fernandez and J. C. Hawkins. Extending use cases and interaction diagrams to develop system architecture requirements. Technical Report TR-CSE-97-47, Department of Computer Science and Engineering, Florida Atlantic University, Boca Raton, Florida, 1997.
7. E. Fernández-Medina, A. Martínez, C. Medina, and M. Pi-attini. UML for the design of secure databases: Integrating security levels, user roles, and constraints in the database design process. 2002. In [14].
8. Martin Fowler and Kendal Scott. UML Distilled - Applying the Standard Object Modelling Language. Addison Wesley Longman Inc., 7th edition, June 1998.
9. S.-H. Houmb, F. Den Braber, M. Soldal Lund, and K. Stolen. Towards a UML profile for model-based risk assessment. In Jürjens et al. [14].
10. Ivar Jacobson, Grady Booch, and James Rumbaugh. The Unified Software Development Process. Addison Wesley Longman, Inc., 1999.
11. J. Jürjens. UMLsec: Extending UML for secure systems development. In J.-M. Jézéquel, H. Hussmann, and S. Cook, editors, UML 2002 - The Unified Modeling Language, volume 2460 of LNCS, pages 412-425, Dresden, Sept. 30 - Oct. 4 2002. Springer. 5th International Conference.
12. J. Jürjens. Developing Security-Critical Systems with UML, 2003. Series of tutorials at international conferences. Download of material at http://www4.in. tum.de/~juerjens/csdumltut.
13. J. Jürjens. Secure Systems Development with UML. Springer, 2003. To be published.
14. J. Jürjens, V. Cengarle, E. Fernandez, B. Rumpe, and R. Sandner, editors. Critical Systems Development with UML, number TUM-I0208 in TUM technical report, 2002. UML'02 satellite workshop proceedings.
15. J. Jürjens, P. Shabalin, S. Meng, E. Alter, S. Höhn, S. Shen, G. Kokavecz, and S. Schwarzmüller. UMLsec tool, 2003. Webinterface at http://www4.in.tum.de/~umlsec.
16. Philippe Kruchten. The Rational Unified Process - An Introduction, Second Edition. Addison Wesley Longman, Inc., 2000.
17. R. F. Paige and J. S. Ostroff. A proposal for a lightweight rigorous UML-based development method for reliable systems. In Workshop on Practical UML-Based Rigorous Development Methods, pages 192-207, 2001. UML 2001 satellite workshop.
18. B. Schneier. Attack Trees - Modeling Security Threats. Dr. Dobb's Journal, 12, 1999.
19. Guttorm Sindre and Andreas L. Opdahl. Capturing Security Requirments through Misuse Cases. In NIK 2001, Norsk Informatikkonferanse 2001, http://www.nik.no/2001, 2001.
20. John Viega and Gary McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, 2002.