Formal access control analysis in the software development process

  • Authors:

  • Manuel Koch;Francesco Parisi-Presicce

  • Affiliations:

  • Freie Universität Berlin, Germany;George Mason University, VA

  • Venue:
  • Proceedings of the 2003 ACM workshop on Formal methods in security engineering
  • Year:
  • 2003

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security is a crucial aspect in any modern software system. To ensure security in the final product, security requirements must be considered in the entire software development process. We evaluate in this paper how security requirements can be integrated into the analysis phase of an object-oriented software development process. Our approach is model driven by providing models for security aspects related to the models for functional requirements. We investigate how the security models can be generated from the functional models. We give a graph-based formal semantics to the security models and present verification concepts which ensure the security requirements in the models.