Performance analysis of security aspects by weaving scenarios extracted from UML models

  • Authors:

  • Murray Woodside;Dorina C. Petriu;Dorin B. Petriu;Jing Xu;Tauseef Israr;Geri Georg;Robert France;James M. Bieman;Siv Hilde Houmb;Jan Jürjens

  • Affiliations:

  • Carleton University, Systems and Computer Engineering, Ottawa, ON, Canada, K1S 5B6;Carleton University, Systems and Computer Engineering, Ottawa, ON, Canada, K1S 5B6;Carleton University, Systems and Computer Engineering, Ottawa, ON, Canada, K1S 5B6;Carleton University, Systems and Computer Engineering, Ottawa, ON, Canada, K1S 5B6;Carleton University, Systems and Computer Engineering, Ottawa, ON, Canada, K1S 5B6;Colorado State University, Department of Computer Science, Fort Collins, CO 80523, USA;Colorado State University, Department of Computer Science, Fort Collins, CO 80523, USA;Colorado State University, Department of Computer Science, Fort Collins, CO 80523, USA;Norwegian University of Science and Technology, Trondheim, Norway;The Open University, Computing Department, Milton Keynes, MK7 6AA, United Kingdom

  • Venue:
  • Journal of Systems and Software
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Aspect-oriented modeling (AOM) allows software designers to describe features that address pervasive concerns separately as aspects, and to systematically incorporate the features into a design model using model composition techniques. The goal of this paper is to analyze the performance effects of different security features that may be represented as aspect models. This is part of a larger research effort to integrate methodologies and tools for the analysis of security and performance properties early in the software development process. In this paper, we describe an extension to the AOM approach that provides support for performance analysis. We use the performance analysis techniques developed previously in the PUMA project, which take as input UML models annotated with the standard UML Profile for Schedulability, Performance and Time (SPT), and transform them first into Core Scenario Model (CSM), and then into different performance models. The composition of the aspects with the primary (base) model is performed at the CSM level. A new formal definition of CSM properties and operations is described as a foundation for scenario-based weaving. The proposed approach is illustrated with an example that utilizes two standards, TPC-W and SSL.