A UML-based static verification framework for security

Secure software engineering is a new research area that has been proposed to address security issues during the development of software systems. This new area of research advocates that security characteristics should be considered from the early stages of the software development life cycle and not to be added as another layer in the system on an ad-hoc basis after the system is built. In this paper we describe a UML-based Static Verification Framework (USVF) to support the design and verification of secure software systems in early stages of the software development life-cycle taking into consideration security and general requirements of the software system. The USVF performs static verification on UML models composed of UML class and state machine diagrams extended with an action language. We present an operational semantics of UML models, define a property specification language designed to reason about temporal and general properties of UML state machines using the semantic domai...

• Type: Journal
• Year: 2010
• Where: RE
• Authors: Igor Siveroni, Andrea Zisman, George Spanoudakis
• Keywords: Property Specification Language, RE 2010, Security, Software Engineering, Software System