%0 Book Section %T A Model Transformation Semantics and Analysis Methodology for SecureUML %A Brucker, Achim D. %A Doser, Jürgen %A Wolff, Burkhart %E Nierstrasz, Oscar %E Whittle, Jon %E Harel, David %E Reggio, Gianna %B MoDELS 2006: Model Driven Engineering Languages and Systems %D 2006 %N 4199 %I Springer-Verlag %C Heidelberg %G USenglish %F brucker.ea:transformation:2006 %O An extended version of this paper is available as ETH Technical Report, no. 524. %X SecureUML is a security modeling language for formalizing access control requirements in a declarative way. It is equipped with a \UML notation in terms of a \UML profile, and can be combined with arbitrary design modeling languages. We present a semantics for SecureUML in terms of a model transformation to standard UML/OCL. The transformation scheme is used as part of an implementation of a tool chain ranging from front-end visual modeling tools over code-generators to the interactive theorem proving environment \holocl. The methodological consequences for an analysis of the generated ØCL formulae are discussed. %K security, SecureUML, UML, OCL, HOL-OCL, model-transformation %U http://www.brucker.ch/bibliography/abstract/brucker.ea-transformation-2006 %U //www.brucker.ch/bibliography/download/2006/brucker.ea-transformation-2006-b.pdf %U http://www.brucker.ch/bibliography/download/2006/brucker.ea-transformation-2006.pdf %U http://dx.doi.org/10.1007/11880240_22 %P 306-320