Modelling audit security for Smart-Card payment schemes with UML-SEC

  • Authors:
  • Jan Jürjens

  • Affiliations:
  • Univ. of Oxford, Oxford, UK

  • Venue:
  • Sec '01 Proceedings of the 16th international conference on Information security: Trusted information: the new decade challenge
  • Year:
  • 2001

Quantified Score

Hi-index 0.00

Visualization

Abstract

To overcome the difficulties of correct secure systems design, we propose formal modelling using the object-oriented modelling language UML. Specifically, we consider the problem of accountability through auditing. We explain our method at the example of a part of the Common Electronic Purse Specifications (CEPS), a candidate for an international electronic purse standard, indicate possible vulnerabilities and present concrete security advice on that system. To overcome the difficulties of correct secure systems design, we propose formal modeling using the object-oriented modeling language UML. Specifically, we consider the problem of accountability through auditing. We explain our method at the example of a part of the common electronic purse specifications (CEPS), a candidate for an international electronic purse standard, indicate possible vulnerabilities and present concrete security advice on that system. To overcome the difficulties of correct secure systems design, we propose formal modeling using the object-oriented modeling language UML. Specifically, we consider the problem of accountability through auditing. We explain our method at the example of a part of the common electronic purse specifications (CEPS), a candidate for an international electronic purse standard, indicate possible vulnerabilities and present concrete security advice on that system.