UMLsec4UML2 - Adopting UMLsec to Support UML2
- In this paper, we present an approach to adopt UMLsec, which is defined for UML 1.5, to support the current UML version 2.3. The new profile UMLsec4UML2 is technically constructed as a UML profile diagram, which is equipped with a number of integrity conditions expressed using OCL. Consequently, the UMLsec4UML2-profile can be loaded in any Eclipse-based EMF- and MDT-compatible UML editing tool to develop and analyze different kinds of security models. The OCL constraints replace the static checks of the tool support for the old UMLsec defined for UML 1.5. Thus, the UMLsec4UML2-profile not only provides the whole expresiveness of UML2.3 for security modeling, it also brings considerably more freedom in selecting a basic UML editing tool, and it integrates modeling and analyzing security models. Since UML2.3 comprises new diagram types, as well as new model elements and new semantics of diagram types already contained in UML1.5, we consider a number of these changes in detail. MoreIn this paper, we present an approach to adopt UMLsec, which is defined for UML 1.5, to support the current UML version 2.3. The new profile UMLsec4UML2 is technically constructed as a UML profile diagram, which is equipped with a number of integrity conditions expressed using OCL. Consequently, the UMLsec4UML2-profile can be loaded in any Eclipse-based EMF- and MDT-compatible UML editing tool to develop and analyze different kinds of security models. The OCL constraints replace the static checks of the tool support for the old UMLsec defined for UML 1.5. Thus, the UMLsec4UML2-profile not only provides the whole expresiveness of UML2.3 for security modeling, it also brings considerably more freedom in selecting a basic UML editing tool, and it integrates modeling and analyzing security models. Since UML2.3 comprises new diagram types, as well as new model elements and new semantics of diagram types already contained in UML1.5, we consider a number of these changes in detail. More specifically, we consider composite structure and sequence diagrams with respect to modeling security properties according to the original version of UMLsec. The goal is to use UMLsec4UML2 to specify architectural security patterns.…
Author: | Holger Schmidt, Jan Jürjens |
---|---|
open access (DINI-Set): | open_access |
open access : | Bronze - frei zugänglich aber ohne Lizenzhinweis, d.h. keine Weitergabe |
Fachbereich/Einrichtung: | Hochschule Düsseldorf / Fachbereich - Medien |
Hochschule Düsseldorf / Fachbereich - Medien / Digitale Vernetzung und Informationssicherheit | |
Document Type: | Workingpaper / Report |
Year of Completion: | 2011 |
Language of Publication: | English |
Publisher: | Technische Hochschule Dortmund |
Place of publication: | Dortmund |
Parent Title (German): | LS 14 Software Engineering mit dem Schwerpunkt Entwicklung evolutionsfähiger Software und Systeme |
Page Number: | 17 |
Related URL: | https://eldorado.tu-dortmund.de/handle/2003/27602?locale=de |
Handle: | http://hdl.handle.net/2003/27602 |
DOI: | https://doi.org/10.17877/DE290R-990 |
Tag: | OCL; UML2; UMLsec; security architecture; security pattern |
Dewey Decimal Classification: | 0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 000 Informatik, Informationswissenschaft, allgemeine Werke |
Licence (German): | Es gilt das deutsche Urheberrecht |
Release Date: | 2018/10/11 |
Note: | Der Bericht kann über die angebenen URL aufgerufen werden. |