Chapter List

9.1 More on the UMLsec Approach

The following further material related to UMLsec has to be omitted here:

• [J r03b, J r04h] gives more detail on specification-based testing for critical systems with UML.

• [J r02e] uses UMLsec to provide formally based development methods for CORBA-based applications.

• [J r02b, J r03c, J r03d, J r04b, J r03b, J r04a, J r04h] demonstrate how to generalize the approach presented here to develop systems with other criticality requirements, such as safety-critical, performance-critical, or real-time systems, using an appropriate extension of UML.

• [J r02g] presents applications of UMLsec in the telemedicine application domain, [JG03] in the automotive domain, and [JK03] considers secure mobile systems.

• [JPW02] gives more results about using security patterns in model-based development in the context of UMLsec.

• [JPW03, PJWB03, BBH ⁺03, J r04j] propose some development methods for security-critical systems using UMLsec.

• [J r03a] explores the notion of algebraic state machines similar to the UML Machines considered here, and applications to security.

• [JH03, HJ03b] show how to combine the use of UMLsec with model-based risk assessment.

9.2 Other Approaches to Security Engineering

We give an overview of other approaches to security engineering using formal methods or UML. Here we only give a general overview of topics relevant to the main...