Dynamic Secure Aspect Modeling with UML: From Models to Code | SpringerLink
Skip to main content
Springer Nature Link
Log in

Dynamic Secure Aspect Modeling with UML: From Models to Code

  • Conference paper
Model Driven Engineering Languages and Systems (MODELS 2005)

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 3713))

Abstract

Security engineering deals with modeling, analysis, and implementation of complex security mechanisms. The dynamic nature of such mechanisms makes it difficult to anticipate undesirable emergent behavior. In this work, we propose an approach to develop and analyze security-critical specifications and implementations using aspect-oriented modeling. Since we focus on the dynamic views of a system, our work is complementary to existing approaches to security aspects mostly concerned with static views. Our approach includes a link to implementations in so far as the code which is constructed from the models can be analyzed automatically for satisfaction of the security requirements stated in the UML diagrams. We present tool support for our approach.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Similar content being viewed by others

References

  1. AbsInt. aicall (2004), http://www.aicall.de/

  2. Broy, M., Jürjens, J., Cengarle, V., Rumpe, B.: Towards a system model for UML. Technical report, TU Munich (2005)

    Google Scholar 

  3. Braun, P., Marschall, F.: The BOTL tool (2003), http://www4.in.tum.de/~marschal/botl/index.htm

  4. Dolev, D., Yao, A.: On the security of public key protocols. IEEE Transactions on Information Theory IT-29(2), 198–208 (1983)

    Article  MathSciNet  Google Scholar 

  5. Elrad, T., Aldawud, O., Bader, A.: Aspect-oriented modeling: Bridging the gap between implementation and design. In: Batory, D., Consel, C., Taha, W. (eds.) GPCE 2002. LNCS, vol. 2487, pp. 189–201. Springer, Heidelberg (2002)

    Chapter  Google Scholar 

  6. Elrad, T., Aksit, M., Kiczales, G., Lieberherr, K.J., Ossher, H.: Discussing aspects of AOP. Commun. ACM 44(10), 33–38 (2001)

    Article  Google Scholar 

  7. France, R.B., Kim, D., Ghosh, S., Song, E.: A UML-based pattern specification technique. IEEE Trans. Software Eng. 30(3), 193–206 (2004)

    Article  Google Scholar 

  8. France, R.B., Ray, I., Georg, G., Ghosh, S.: Aspect-oriented approach to early design modelling. IEE Proceedings - Software 151(4), 173–186 (2004)

    Article  Google Scholar 

  9. Gomaa, H., Shin, M.E.: Modeling complex systems by separating application and security concerns. In: ICECCS, pp. 19–28. IEEE Computer Society, Los Alamitos (2004)

    Google Scholar 

  10. Jürjens, J.: UMLsec: Extending UML for secure systems development. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, pp. 412–425. Springer, Heidelberg (2002)

    Google Scholar 

  11. Jürjens, J.: Developing safety-critical systems with UML. In: Stevens, P., Whittle, J., Booch, G. (eds.) UML 2003. LNCS, vol. 2863, pp. 360–372. Springer, Heidelberg (2003)

    Chapter  Google Scholar 

  12. Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2004)

    Google Scholar 

  13. Jürjens, J.: Security analysis tool (webinterface and download) (2004), http://www4.in.tum.de/csduml/interface

  14. Jürjens, J.: Sound methods and effective tools for model-based security engineering with UML. In: 27th International Conference on Software Engineering (ICSE 2005), IEEE Computer Society, Los Alamitos (2005)

    Google Scholar 

  15. Lee, J.-S., Bae, D.-H.: An aspect-oriented framework for developing component-based software with the collaboration-based architectural style. Information & Software Technology 46(2), 81–97 (2004)

    Article  Google Scholar 

  16. Marcus, A., Sergeyev, A., Rajlich, V., Maletic, J.I.: An information retrieval approach to concept location in source code. In: WCRE, pp. 214–223. IEEE Computer Society, Los Alamitos (2004)

    Google Scholar 

  17. Schumann, J., Fischer, B., Whalen, M.W., Whittle, J.: Certification support for automatically generated programs. In: HICSS, p. 337 (2003)

    Google Scholar 

  18. Sutcliffe, G., Suttner, C.: The TPTP problem library for automated theorem proving (2001), Available at http://www.tptp.org

  19. Stenz, G., Wolf, A.: E-SETHEO: An automated3 theorem prover. In: Dyckhoff, R. (ed.) TABLEAUX 2000. LNCS, vol. 1847, pp. 436–440. Springer, Heidelberg (2000)

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Software & Systems Engineering, Dep. of Informatics, TU Munich, Germany

    Jan Jürjens

  2. Department of Computer and Information Science, Norwegian University of Science and Technology, Norway

    Siv Hilde Houmb

Authors
  1. Jan Jürjens
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Siv Hilde Houmb
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Simula Research Laboratory, University of Oslo, P.O. Box 134, Lysaker, Norway

    Lionel Briand

  2. IBM T J Watson Research Center, 19 Skyline Drive, 10532, Hawthorne, NY

    Clay Williams

Rights and permissions

Reprints and permissions

Copyright information

© 2005 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Jürjens, J., Houmb, S.H. (2005). Dynamic Secure Aspect Modeling with UML: From Models to Code. In: Briand, L., Williams, C. (eds) Model Driven Engineering Languages and Systems. MODELS 2005. Lecture Notes in Computer Science, vol 3713. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11557432_11

Download citation

  • DOI: https://doi.org/10.1007/11557432_11

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-29010-0

  • Online ISBN: 978-3-540-32057-9

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics