TY - CHAP A1 - Schmidt, Holger A1 - Hatebur, Denis A1 - Heisel, Maritta T1 - Developing Secure Software Using UML Patterns T2 - Intelligent systems: Concepts, methodologies, tools, and applications Y1 - 2018 SN - 9781522556435 U6 - https://doi.org/10.4018/978-1-5225-5643-5.ch022 SP - 551 EP - 592 PB - IGI Global CY - Hershey, Pennsylvania ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Security Engineering Process based on Patterns T2 - 18th International Workshop on Database and Expert Systems Applications (DEXA 2007) N2 - We present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. We describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Further, we introduce a new frame that focuses on the privacy requirement anonymity. KW - security engineering process KW - pattern system KW - data privacy KW - software development Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4312991 SN - 978-0-7695-2932-5 U6 - https://doi.org/10.1109/DEXA.2007.36 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 734 EP - 738 PB - IEEE CY - Regensburg ER - TY - CHAP A1 - Côté, Isabelle A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Wentzlaff, Ina T1 - A Systematic Account of Problem Frames T2 - Proceedings of the 12th European Conference on Pattern Languages of Programs (EuroPLoP '2007), Irsee, Germany, July 4-8, 2007. N2 - We give an enumeration of possible problem frames, based on domain characteristics, and comment on the usefulness of the obtained frames. In particular, we investigate problem domains and their characteristics in detail. This leads to fine-grained criteria for describing problem domains. As a result, we identify a new type of problem domain and come up with integrity conditions for developing useful problem frames. Taking a complete enumeration of possible problem frames (with at most three problem domains, of which only one is constrained) as a basis, we find 8 new problem frames, 7 of which we consider as useful in practical software development. KW - problem frames KW - systematic account Y1 - 2008 SP - 749 EP - 767 PB - Universitätsverlag Konstanz CY - Konstanz ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Müller, Günter T1 - Security Engineering Using Problem Frames T2 - Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding KW - security requirement KW - problem frames KW - security problem KW - security engineering KW - sequence diagram Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11766155_17 SN - 978-3-540-34640-1 U6 - https://doi.org/10.1007/11766155_17 VL - LNCS, 3995 SP - 238 EP - 253 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Pattern System for Security Requirements Engineering T2 - The Second International Conference on Availability, Reliability and Security (ARES'07) N2 - We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem. KW - pattern system KW - system security KW - security KW - software development KW - computer security Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4159824 SN - 0-7695-2775-2 U6 - https://doi.org/10.1109/ARES.2007.12 PB - IEEE CY - Vienna ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Czarnecki, Krzysztof ED - Ober, Ileana ED - Bruel, Jean-Michel ED - Uhl, Axel ED - Völter, Markus T1 - A Formal Metamodel for Problem Frames T2 - Model Driven Engineering Languages and Systems: 11th International Conference, MoDELS 2008, Toulouse, France, September 28 - October 3, 2008. Proceedings N2 - Problem frames are patterns for analyzing, structuring, and characterizing software development problems. This paper presents a formal metamodel for problem frames expressed in UML class diagrams and using the formal specification notation OCL. That metamodel clarifies the nature of the different syntactical elements of problem frames, as well as the relations between them. It provides a framework for syntactical analysis and semantic validation of newly defined problem frames, and it prepares the ground for tool support for the problem frame approach. KW - object constraint language KW - problem frames KW - causal domain KW - eclipse modeling framework Y1 - 2008 UR - https://link.springer.com/chapter/10.1007/978-3-540-87875-9_5 SN - 978-3-540-87874-2 U6 - https://doi.org/10.1007/978-3-540-87875-9_5 VL - LNCS, 5301 SP - 58 EP - 82 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Analysis and Component-based Realization of Security Requirements T2 - 2008 Third International Conference on Availability, Reliability and Security N2 - We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example. KW - security requirement KW - requirements engineering KW - data security KW - computer science Y1 - 2008 UR - https://ieeexplore.ieee.org/document/4529338 SN - 978-0-7695-3102-1 U6 - https://doi.org/10.1109/ARES.2008.27 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 195 EP - 203 PB - IEEE CY - Barcelona ER - TY - CHAP A1 - Côté, Isabelle A1 - Heisel, Maritta A1 - Schmidt, Holger A1 - Hatebur, Denis T1 - UML4PF — A tool for problem-oriented requirements analysis T2 - 2011 IEEE 19th International Requirements Engineering Conference N2 - We present UML4PF, a tool for requirements analysis based on problem frames. It consists of a UML profile and an Eclipse-Plugin to model and analyze problem diagrams, derive specifications, and develop architectures. KW - Unified modeling language KW - problem frames KW - tool support KW - programming KW - generators Y1 - 2011 UR - https://ieeexplore.ieee.org/document/6051670 SN - 978-1-4577-0924-1 U6 - https://doi.org/10.1109/RE.2011.6051670 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 349 EP - 350 PB - IEEE CY - Trento ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Jürjens, Jan A1 - Schmidt, Holger ED - Giannakopoulou, Dimitra ED - Orejas, Fernando T1 - Systematic Development of UMLsec Design Models Based on Security Requirements T2 - Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings KW - security requirement KW - secquence diagram KW - eclipse modeling framework KW - patient monitoring system KW - security requirement engineering Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17 SN - 978-3-642-19810-6 U6 - https://doi.org/10.1007/978-3-642-19811-3_17 VL - LNCS, 6603 SP - 232 EP - 246 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Schmidt, Holger A1 - Hatebur, Denis A1 - Heisel, Maritta ED - Mouratidis, Haralambos T1 - A Pattern-Based Method to Develop Secure Software T2 - Software Engineering for Secure Systems: Industrial and Research Perspectives N2 - The authors present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. The authors describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Afterwards, the security problems and the solution approaches are formally modeled in detail. The formal models serve to prove that the solution approaches are correct solutions to the security problems. Furthermore, the formal models of the solution approaches constitute a formal specification of the software to be developed. Then, the specification is implemented by generic security components and generic security architectures, which constitute architectural patterns. Finally, the generic security components and the generic security architecture that composes them are refined and the result is a secure software product built from existing and/or tailor-made security components. KW - security KW - problems Y1 - 2011 SN - 978-1-61520-837-1 U6 - https://doi.org/10.4018/978-1-61520-837-1.ch003 SP - 32 EP - 74 PB - IGI Global CY - Hershey ER -