brucker.ea:transformation:2006 BookSection Heidelberg Springer-Verlag 2006 MoDELS 2006: Model Driven Engineering Languages and Systems 4199 306-320 BruckerAchimD DoserJürgen WolffBurkhart NierstraszOscar WhittleJon HarelDavid ReggioGianna A Model Transformation Semantics and Analysis Methodology for SecureUML SecureUML is a security modeling language for formalizing access control requirements in a declarative way. It is equipped with a \UML notation in terms of a \UML profile, and can be combined with arbitrary design modeling languages. We present a semantics for SecureUML in terms of a model transformation to standard UML/OCL. The transformation scheme is used as part of an implementation of a tool chain ranging from front-end visual modeling tools over code-generators to the interactive theorem proving environment \holocl. The methodological consequences for an analysis of the generated ØCL formulae are discussed.