3647
2018
eng
551
592
bookpart
IGI Global
Hershey, Pennsylvania
Management Association, Information Resources
1
--
--
--
Developing Secure Software Using UML Patterns
Intelligent systems: Concepts, methodologies, tools, and applications
9781522556435
10.4018/978-1-5225-5643-5.ch022
2022-03-03T10:25:47+00:00
sword
import
false
true
keine Lizenz - nur Metadaten
Holger Schmidt
Denis Hatebur
Maritta Heisel
Import
1539
2007
eng
734
738
conferenceobject
IEEE
Regensburg
0
--
--
--
A Security Engineering Process based on Patterns
We present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. We describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Further, we introduce a new frame that focuses on the privacy requirement anonymity.
18th International Workshop on Database and Expert Systems Applications (DEXA 2007)
978-0-7695-2932-5
10.1109/DEXA.2007.36
https://ieeexplore.ieee.org/abstract/document/4312991
Sie haben Zugriff auf den Volltext innerhalb des HSD Campus.
keine Lizenz - nur Metadaten
Denis Hatebur
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Holger Schmidt
eng
uncontrolled
security engineering process
eng
uncontrolled
pattern system
eng
uncontrolled
data privacy
eng
uncontrolled
software development
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
Hochschule Düsseldorf
1538
2008
eng
749
767
conferenceobject
Universitätsverlag Konstanz
Konstanz
0
--
--
--
A Systematic Account of Problem Frames
We give an enumeration of possible problem frames, based on domain characteristics, and comment on the usefulness of the obtained frames. In particular, we investigate problem domains and their characteristics in detail. This leads to fine-grained criteria for describing problem domains. As a result, we identify a new type of problem domain and come up with integrity conditions for developing useful problem frames. Taking a complete enumeration of possible problem frames (with at most three problem domains, of which only one is constrained) as a basis, we find 8 new problem frames, 7 of which we consider as useful in practical software development.
Proceedings of the 12th European Conference on Pattern Languages of Programs (EuroPLoP '2007), Irsee, Germany, July 4-8, 2007.
keine Lizenz - nur Metadaten
Isabelle Côté
Stefanie Söhnitz orcid=0000-0003-3988-1768
Denis Hatebur
Maritta Heisel
Holger Schmidt
Ina Wentzlaff
eng
uncontrolled
problem frames
eng
uncontrolled
systematic account
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1536
2006
eng
238
253
LNCS, 3995
conferenceobject
Springer
Berlin, Heidelberg
0
--
--
--
Security Engineering Using Problem Frames
Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding
978-3-540-34640-1
10.1007/11766155_17
https://link.springer.com/chapter/10.1007/11766155_17
keine Lizenz - nur Metadaten
Denis Hatebur
Günter Müller
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Holger Schmidt
eng
uncontrolled
security requirement
eng
uncontrolled
problem frames
eng
uncontrolled
security problem
eng
uncontrolled
security engineering
eng
uncontrolled
sequence diagram
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1534
2007
eng
10
conferenceobject
IEEE
Vienna
0
--
--
--
A Pattern System for Security Requirements Engineering
We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem.
The Second International Conference on Availability, Reliability and Security (ARES'07)
0-7695-2775-2
10.1109/ARES.2007.12
https://ieeexplore.ieee.org/abstract/document/4159824
keine Lizenz - nur Metadaten
Denis Hatebur
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Holger Schmidt
eng
uncontrolled
pattern system
eng
uncontrolled
system security
eng
uncontrolled
security
eng
uncontrolled
software development
eng
uncontrolled
computer security
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1533
2008
deu
58
82
LNCS, 5301
conferenceobject
Springer
Berlin, Heidelberg
0
--
--
--
A Formal Metamodel for Problem Frames
Problem frames are patterns for analyzing, structuring, and characterizing software development problems. This paper presents a formal metamodel for problem frames expressed in UML class diagrams and using the formal specification notation OCL. That metamodel clarifies the nature of the different syntactical elements of problem frames, as well as the relations between them. It provides a framework for syntactical analysis and semantic validation of newly defined problem frames, and it prepares the ground for tool support for the problem frame approach.
Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings
978-3-540-87874-2
10.1007/978-3-540-87875-9_5
https://link.springer.com/chapter/10.1007/978-3-540-87875-9_5
keine Lizenz - nur Metadaten
Denis Hatebur
Krzysztof Czarnecki
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Ileana Ober
Holger Schmidt
Jean-Michel Bruel
Axel Uhl
Markus Völter
deu
uncontrolled
object constraint language
deu
uncontrolled
problem frames
deu
uncontrolled
causal domain
deu
uncontrolled
eclipse modeling framework
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1532
2008
eng
195
203
conferenceobject
IEEE
Barcelona
0
--
--
--
Analysis and Component-based Realization of Security Requirements
We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example.
2008 Third International Conference on Availability, Reliability and Security
978-0-7695-3102-1
10.1109/ARES.2008.27
https://ieeexplore.ieee.org/document/4529338
Sie haben Zugriff auf den Volltext innerhalb des HSD Campus.
keine Lizenz - nur Metadaten
Denis Hatebur
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Holger Schmidt
eng
uncontrolled
security requirement
eng
uncontrolled
requirements engineering
eng
uncontrolled
data security
eng
uncontrolled
computer science
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1526
2011
eng
349
350
conferenceobject
IEEE
Trento
0
--
--
--
UML4PF — A tool for problem-oriented requirements analysis
We present UML4PF, a tool for requirements analysis based on problem frames. It consists of a UML profile and an Eclipse-Plugin to model and analyze problem diagrams, derive specifications, and develop architectures.
2011 IEEE 19th International Requirements Engineering Conference
978-1-4577-0924-1
10.1109/RE.2011.6051670
https://ieeexplore.ieee.org/document/6051670
Sie haben Zugriff auf den Volltext innerhalb des HSD Campus.
keine Lizenz - nur Metadaten
Isabelle Côté
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Holger Schmidt
Denis Hatebur
eng
uncontrolled
Unified modeling language
eng
uncontrolled
problem frames
eng
uncontrolled
tool support
eng
uncontrolled
programming
eng
uncontrolled
generators
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1522
2011
eng
232
246
LNCS, 6603
conferenceobject
Springer
Berlin, Heidelberg
0
--
--
--
Systematic Development of UMLsec Design Models Based on Security Requirements
Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings
978-3-642-19810-6
10.1007/978-3-642-19811-3_17
https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17
keine Lizenz - nur Metadaten
Denis Hatebur
Dimitra Giannakopoulou
Stefanie Söhnitz orcid=0000-0003-3988-1768
Maritta Heisel
Fernando Orejas
Jan Jürjens
Holger Schmidt
eng
uncontrolled
security requirement
eng
uncontrolled
secquence diagram
eng
uncontrolled
eclipse modeling framework
eng
uncontrolled
patient monitoring system
eng
uncontrolled
security requirement engineering
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit
1514
2011
eng
32
74
bookpart
IGI Global
Hershey
0
--
--
--
A Pattern-Based Method to Develop Secure Software
The authors present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. The authors describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Afterwards, the security problems and the solution approaches are formally modeled in detail. The formal models serve to prove that the solution approaches are correct solutions to the security problems. Furthermore, the formal models of the solution approaches constitute a formal specification of the software to be developed. Then, the specification is implemented by generic security components and generic security architectures, which constitute architectural patterns. Finally, the generic security components and the generic security architecture that composes them are refined and the result is a secure software product built from existing and/or tailor-made security components.
Software Engineering for Secure Systems: Industrial and Research Perspectives
978-1-61520-837-1
10.4018/978-1-61520-837-1.ch003
keine Lizenz - nur Metadaten
Holger Schmidt
Haralambos Mouratidis
Stefanie Söhnitz orcid=0000-0003-3988-1768
Denis Hatebur
Maritta Heisel
eng
uncontrolled
security
eng
uncontrolled
problems
Informatik, Informationswissenschaft, allgemeine Werke
Fachbereich - Medien
Digitale Vernetzung und Informationssicherheit