A Model Transformation Semantics and Analysis Methodology for SecureUML

Achim D. Brucker und Jürgen Doser und Burkhart Wolff

SecureUML is a security modeling language for formalizing access control requirements in a declarative way. It is equipped with a UML notation in terms of a UML profile, and can be combined with arbitrary design modeling languages. We present a semantics for SecureUML in terms of a model transformation to standard UML/OCL. The transformation scheme is used as part of an implementation of a tool chain ranging from front-end visual modeling tools over code-generators to the interactive theorem proving environment holocl. The methodological consequences for an analysis of the generated OCL formulae are discussed.

Schlüsselwörter: security, SecureUML, UML, OCL, HOL-OCL, model-transformation
Kategorien: Informationssicherheit, Formale Methoden, Softwaretechnik

Bitte zitieren sie diesen Artikel wie folgt:
Achim D. Brucker und Jürgen Doser und Burkhart Wolff. A Model Transformation Semantics and Analysis Methodology for SecureUML. In MoDELS 2006: Model Driven Engineering Languages and Systems. Lecture Notes in Computer Science (4199), pages 306-320, Springer-Verlag, 2006. An extended version of this paper is available as ETH Technical Report, no. 524.
Schlüsselwörter: security, SecureUML, UML, OCL, HOL-OCL, model-transformation
(PDF) (Extended Version) (BibTeX) (Endnote) (RIS) (Word 2007) (doi:10.1007/11880240_22) (Share article on LinkedIn. Share article on CiteULike. Share article on Connotea. )

BibTeX
@InCollection{ brucker.ea:transformation:2006,
abstract = {SecureUML is a security modeling language for formalizing access control requirements in a declarative way. It is equipped with a \UML notation in terms of a \UML profile, and can be combined with arbitrary design modeling languages. We present a semantics for SecureUML in terms of a model transformation to standard UML/OCL. The transformation scheme is used as part of an implementation of a tool chain ranging from front-end visual modeling tools over code-generators to the interactive theorem proving environment \holocl. The methodological consequences for an analysis of the generated \OCL formulae are discussed.},
address = {Heidelberg},
author = {Achim D. Brucker and J\"urgen Doser and Burkhart Wolff},
booktitle = {{MoDELS} 2006: Model Driven Engineering Languages and Systems},
doi = {10.1007/11880240_22},
editor = {Oscar Nierstrasz and Jon Whittle and David Harel and Gianna Reggio},
file = {http://www.brucker.ch/bibliography/download/2006/brucker.ea-transformation-2006-b.pdf},
filelabel = {Extended Version},
keywords = {security, SecureUML, UML, OCL, HOL-OCL, model-transformation},
language = {USenglish},
location = {Genova},
note = {An extended version of this paper is available as ETH Technical Report, no. 524.},
number = {4199},
pages = {306--320},
pdf = {http://www.brucker.ch/bibliography/download/2006/brucker.ea-transformation-2006.pdf},
project = {CSFMDOS},
publisher = {Springer-Verlag},
series = {Lecture Notes in Computer Science},
title = {A Model Transformation Semantics and Analysis Methodology for {SecureUML}},
url = {http://www.brucker.ch/bibliography/abstract/brucker.ea-transformation-2006},
year = {2006},
}