Secure Systems Development with UML

Jan Jürjens

309 pages, parution le 27/01/2005

Ajouter à une liste

Indisponible

Résumé

Attacks against computer systems can cause considerable economic or physical damage. High-quality development of security-critical systems is difficult, mainly because of the conflict between development costs and verifiable correctness.

Jürjens presents the UML extension UMLsec for secure systems development. It uses the standard UML extension mechanisms, and can be employed to evaluate UML specifications for vulnerabilities using a formal semantics of a simplified fragment of UML. Established rules of security engineering can be encapsulated and hence made available even to developers who are not specialists in security. As one example, Jürjens uncovers a flaw in the Common Electronic Purse Specification, and proposes and verifies a correction.

With a clear separation between the general description of his approach and its mathematical foundations, the book is ideally suited both for researchers and graduate students in UML or formal methods and security, and for advanced professionals writing critical applications.

Sommaire

Prologue
- Introduction
- Walk-through : Using UML for Security
- Background
Developing Secure Systems
- Model-based Security Engineering with UML
- Applications
Tool Support
- Tool support for UMLsec
- A Formal Foundation
- Formal Systems Development with UML
Epilogue
- Further Material
- Outlook
Appendices
- A: Towards UML 2.0
- B: The Semantics of UML Machine Rules
- C: Proofs

Voir tout

Replier

Caractéristiques techniques

	PAPIER
Éditeur(s)	Springer
Auteur(s)	Jan Jürjens
Parution	27/01/2005
Nb. de pages	309
Format	16 x 24
Couverture	Relié
Poids	603g
Intérieur	Noir et Blanc
EAN13	9783540007012