Abstract
Security engineering deals with modeling, analysis, and implementation of complex security mechanisms. The dynamic nature of such mechanisms makes it difficult to anticipate undesirable emergent behavior. In this work, we propose an approach to develop and analyze security-critical specifications and implementations using aspect-oriented modeling. Since we focus on the dynamic views of a system, our work is complementary to existing approaches to security aspects mostly concerned with static views. Our approach includes a link to implementations in so far as the code which is constructed from the models can be analyzed automatically for satisfaction of the security requirements stated in the UML diagrams. We present tool support for our approach.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
AbsInt. aicall (2004), http://www.aicall.de/
Broy, M., Jürjens, J., Cengarle, V., Rumpe, B.: Towards a system model for UML. Technical report, TU Munich (2005)
Braun, P., Marschall, F.: The BOTL tool (2003), http://www4.in.tum.de/~marschal/botl/index.htm
Dolev, D., Yao, A.: On the security of public key protocols. IEEE Transactions on Information Theory IT-29(2), 198–208 (1983)
Elrad, T., Aldawud, O., Bader, A.: Aspect-oriented modeling: Bridging the gap between implementation and design. In: Batory, D., Consel, C., Taha, W. (eds.) GPCE 2002. LNCS, vol. 2487, pp. 189–201. Springer, Heidelberg (2002)
Elrad, T., Aksit, M., Kiczales, G., Lieberherr, K.J., Ossher, H.: Discussing aspects of AOP. Commun. ACM 44(10), 33–38 (2001)
France, R.B., Kim, D., Ghosh, S., Song, E.: A UML-based pattern specification technique. IEEE Trans. Software Eng. 30(3), 193–206 (2004)
France, R.B., Ray, I., Georg, G., Ghosh, S.: Aspect-oriented approach to early design modelling. IEE Proceedings - Software 151(4), 173–186 (2004)
Gomaa, H., Shin, M.E.: Modeling complex systems by separating application and security concerns. In: ICECCS, pp. 19–28. IEEE Computer Society, Los Alamitos (2004)
Jürjens, J.: UMLsec: Extending UML for secure systems development. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 412–425. Springer, Heidelberg (2002)
Jürjens, J.: Developing safety-critical systems with UML. In: Stevens, P., Whittle, J., Booch, G. (eds.) UML 2003. LNCS, vol. 2863, pp. 360–372. Springer, Heidelberg (2003)
Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2004)
Jürjens, J.: Security analysis tool (webinterface and download) (2004), http://www4.in.tum.de/csduml/interface
Jürjens, J.: Sound methods and effective tools for model-based security engineering with UML. In: 27th International Conference on Software Engineering (ICSE 2005), IEEE Computer Society, Los Alamitos (2005)
Lee, J.-S., Bae, D.-H.: An aspect-oriented framework for developing component-based software with the collaboration-based architectural style. Information & Software Technology 46(2), 81–97 (2004)
Marcus, A., Sergeyev, A., Rajlich, V., Maletic, J.I.: An information retrieval approach to concept location in source code. In: WCRE, pp. 214–223. IEEE Computer Society, Los Alamitos (2004)
Schumann, J., Fischer, B., Whalen, M.W., Whittle, J.: Certification support for automatically generated programs. In: HICSS, p. 337 (2003)
Sutcliffe, G., Suttner, C.: The TPTP problem library for automated theorem proving (2001), Available at http://www.tptp.org
Stenz, G., Wolf, A.: E-SETHEO: An automated3 theorem prover. In: Dyckhoff, R. (ed.) TABLEAUX 2000. LNCS, vol. 1847, pp. 436–440. Springer, Heidelberg (2000)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Jürjens, J., Houmb, S.H. (2005). Dynamic Secure Aspect Modeling with UML: From Models to Code. In: Briand, L., Williams, C. (eds) Model Driven Engineering Languages and Systems. MODELS 2005. Lecture Notes in Computer Science, vol 3713. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11557432_11
Download citation
DOI: https://doi.org/10.1007/11557432_11
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-29010-0
Online ISBN: 978-3-540-32057-9
eBook Packages: Computer ScienceComputer Science (R0)