Modeling of Evolution to Secure Application System: from Requirements Model to Software Architecture

This paper describes an approach to modeling the evolution of an application system to a secure application system in terms of the software requirements model and software architecture model. The requirements for security services are captured separately from application requirements, and the security services are encapsulated in connectors in the software architecture, separately from the components providing functional services. In this paper, the evolution of requirements and software architecture models to their corresponding security models is described in the center of security requirement conditions. A security requirement condition is maintained consistently from the security requirements model to secure software architecture. In the requirements model and software architecture for a secure system, a security service is fulfilled if a security requirement condition holds. An electronic commerce system is considered to demonstrate the approach.