Security-Critical System Development with Extended Use Cases

Authors:
G. Popp;J. Jürjens;G. Wimmel;R. Breu
Affiliations:
-;-;-;-
Venue:
APSEC '03 Proceedings of the Tenth Asia-Pacific Software Engineering Conference Software Engineering Conference
Year:
2003

Citing 0
Cited 12

RUPSec: Extending Business Modeling and Requirements Disciplines of RUP for Developing Secure Systems

EUROMICRO '05 Proceedings of the 31st EUROMICRO Conference on Software Engineering and Advanced Applications
A common criteria based security requirements engineering process for the development of secure information systems

Computer Standards & Interfaces
Towards security requirements management for software product lines: A security domain requirements engineering process

Computer Standards & Interfaces
Quantitative risk-based security prediction for component-based systems with explicitly modeled attack profiles

Journal of Systems and Software
Reusable security use cases for mobile grid environments

IWSESS '09 Proceedings of the 2009 ICSE Workshop on Software Engineering for Secure Systems
Analysis of Secure Mobile Grid Systems: A systematic approach

Information and Software Technology
A systematic review of security requirements engineering

Computer Standards & Interfaces
Towards CIM to PIM transformation: from secure business processes defined in BPMN to use-cases

BPM'07 Proceedings of the 5th international conference on Business process management
Applying a security requirements engineering process

ESORICS'06 Proceedings of the 11th European conference on Research in Computer Security
A comparative study of proposals for establishing security requirements for the development of secure information systems

ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part III
An advanced approach for modeling and detecting software vulnerabilities

Information and Software Technology
From misuse cases to mal-activity diagrams: bridging the gap between functional security analysis and design

Software and Systems Modeling (SoSyM)

Quantified Score

Hi-index	0.00

Visualization

Abstract

Due to increasing interconnection, IT systems are confrontedwith more and more attacks. To address this problem,we have to consider security requirements from the beginningof the system development. In early phases of systemdevelopment, it is common to use a hybrid system viewwhich is based on an object oriented modeling of the applicationcore and the specification of use cases. In thispaper, we present an extension of this process for security-criticalsystems. We show a methodical approach for thedevelopment of security-critical systems and the modelingof security aspects in the application core with an extensionof the Unified Modeling Language for secure systems development,UMLsec. Furthermore, we introduce security usecases for the development of security aspects in conjunctionwith behavioral modeling.