Tool support for code generation from a UMLsec property

Authors:
Lionel Montrieux;Jan Jürjens;Charles B. Haley;Yijun Yu;Pierre-Yves Schobbens;Hubert Toussaint
Affiliations:
The Open University, Milton Keynes, United Kingdom;TU Dortmund & Fraunhofer ISST, Dortmund, Germany;The Open University, Milton Keynes, United Kingdom;The Open University, Milton Keynes, United Kingdom;University of Namur, Namur, Belgium;University of Namur, Namur, Belgium
Venue:
Proceedings of the IEEE/ACM international conference on Automated software engineering
Year:
2010

Citing 3
Cited 2

SecureUML: A UML-Based Modeling Language for Model-Driven Security

UML '02 Proceedings of the 5th International Conference on The Unified Modeling Language
Tools for model-based security engineering: models vs. code

Proceedings of the twenty-second IEEE/ACM international conference on Automated software engineering
Secure Systems Development with UML

Secure Systems Development with UML

Evaluation of the Pattern-based method for Secure Development (PbSD): A controlled experiment

Information and Software Technology
Adaptable, model-driven security engineering for SaaS cloud-based applications

Automated Software Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

This demo presents a tool to generate code from verified Role-Based Access Control properties defined using UMLsec. It can either generate Java code, or generate Java code for the UML model and AspectJ code for enforcing said RBA properties. Both approaches use the Java Authentication and Authorization Service (JAAS) to enforce access control.