A metamodel-based approach for analyzing security-design models (2007)
| Venue: | In models 2007, volume 4735 of lncs |
| Citations: | 4 - 2 self |
BibTeX
@INPROCEEDINGS{Basin07ametamodel-based,
author = {David Basin and Manuel Clavel and Jürgen Doser and Marina Egea},
title = {A metamodel-based approach for analyzing security-design models},
booktitle = {In models 2007, volume 4735 of lncs},
year = {2007},
pages = {190--204},
publisher = {Springer}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Abstract We have previously proposed an expressive UML-based language for constructing and transforming security-design models, which are models that combine design specifications for distributed systems with specifications of their security policies. Here we show how the same framework can be used to analyze these models: queries about properties of the security policy modeled are expressed as formulas in UML’s Object Constraint Language and evaluated over the metamodel of the security-design language. We show how this can be done in a semantically precise and meaningful way and demonstrate, through examples, that this approach can be used to formalize and check non-trivial security properties of security-design models. The approach and examples presented have all been implemented and checked in the SecureMOVA tool. 1
