论文信息 - SecureUML: A UML-Based Modeling Language for Model-Driven Security

SecureUML: A UML-Based Modeling Language for Model-Driven Security

We present a modeling language for the model-driven development of secure, distributed systems based on the Unified Modeling Language (UML). Our approach is based on role-based access control with additional support for specifying authorization constraints. We show how UMLcan be used to specify information related to access control in the overall design of an application and how this information can be used to automatically generate complete access control infrastructures. Our approach can be used to improve productivity during the development of secure distributed systems and the quality of the resulting systems.

[1] Trent Jaeger,et al. Proceedings of the Fourth ACM Workshop on Role-Based Access Control, RBAC 1999, Fairfax, VA, USA, October 28-29, 1999 , 1997, RBAC.

[2] Achim D. Brucker,et al. A Proposal for a Formal OCL Semantics in Isabelle/HOL , 2002, TPHOLs.

[3] Ravi S. Sandhu,et al. Towards a UML based approach to role engineering , 1999, RBAC '99.

[4] D. B. Davis,et al. Sun Microsystems Inc. , 1993 .

[5] Ramaswamy Chandramouli,et al. The Queen's Guard: A Secure Enforcement of Fine-grained Access Control In Distributed Data Analytics Platforms , 2001, ACM Trans. Inf. Syst. Secur..

[6] Axel Uhl,et al. Model-Driven Architecture , 2002, OOIS Workshops.

[7] Dave Thomas,et al. State Machines , 2002, IEEE Softw..

[8] Jan Jürjens,et al. Towards Development of Secure Systems Using UMLsec , 2001, FASE.

[9] Microsystems Sun,et al. Enterprise JavaBeans^ Specification Version 2.1 , 2002 .

[10] Ravi S. Sandhu,et al. Role-Based Access Control Models , 1996, Computer.

[11] Trent Jaeger. On the increasing importance of constraints , 1999, RBAC '99.