Modelling and analysing resilience as a security issue within UML

  • Authors:
  • Ricardo J. Rodríguez;José Merseguer;Simona Bernardi

  • Affiliations:
  • Universidad de Zaragoza, Zaragoza, Spain;Universidad de Zaragoza, Zaragoza, Spain;Università di Torino, Torino, Italy

  • Venue:
  • Proceedings of the 2nd International Workshop on Software Engineering for Resilient Systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Modelling system security is not common practise in software projects yet. Among other problems, there is not a widely accepted methodology which unifies the actual heterogeneity of security issues when addressing a whole security specification. Certainly, the reality is even worse since there is not an accepted or standard common notation for carrying out the security specification. In this work, we study how modelling security issues, specifically resilience, could be integrated in the MARTE-DAM framework, which allows the expression of performance and dependability requirements in UML models. We base this claim on the close relationship between security and dependability. Indeed, MARTE proposes a framework for non-functional properties specification (NFP), while DAM exploits it for dependability purposes. So, our goal is to take advantage of the common NFP framework while the dependability and security concerns are modelled in a unified view. On the other hand, we consider that the resulting security specification will be useful for developing model in which security related properties, such as availability, will be analysed. We will clarify these claims by means of an example.