Evaluation of the unified modeling language for security requirements analysis

  • Authors:
  • Marife G. Ontua;Susan Pancho-Festin

  • Affiliations:
  • Department of Computer Science, University of the Philippines, Diliman, Quezon City, Philippines;Department of Computer Science, University of the Philippines, Diliman, Quezon City, Philippines

  • Venue:
  • WISA'05 Proceedings of the 6th international conference on Information Security Applications
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security protocols can be difficult to specify and analyze. These difficulties motivate the need for models that will support the development of secure systems from the design to the implementation stages. We used the Unified Modeling Language (UML), an industry standard in object-oriented systems modeling, to express security requirements. We also developed an application, the UML Analyzer, to help identify possible vulnerabilities in the modeled protocol. This was achieved by checking the XML Meta-data Interchange (XMI) files generated from the UML diagrams. When compared with other analyses of IKE, our results indicate that UML diagrams and XMI files offer promising possibilities in the modeling and analysis of security protocols.