Consequences of Security Aspect Interactions on Aspect-Oriented Modeling

نویسندگان

  • Dan Matheson
  • Siv Hilde Houmb
چکیده

Non-functional concerns are present in all software solutions and products. While the functional requirements most often drive the development of models in Model Driven Development (MDD), the modeling of non-functional concerns, such as security, is equally important for a high quality solution. The security concerns within a solution are often crosscutting, non-orthogonal and of a diverse nature. There exist a variety of combinations of security solutions, which in many cases significantly increase the solution complexity. Aspect-Oriented Modeling (AOM) is an MDD approach that helps a software engineer to develop higher quality solutions by considering various requirements independently before composing the separate sub-solution models with the core functionality. This paper looks at some of the possible aspect representations for the common security concerns of authentication, authorization, auditing, and data privacy. The goal is to develop some of the interaction concepts needed for an effective AOM approach.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

An Aspect-Based Approach to Modeling Security Concerns

In this paper we show how design-level aspects can be used to encapsulate security concerns that can be woven into models of software designs. The aspect-oriented design technique described in this paper allows one to analyze the impact of security concerns on other functional concerns. We illustrate our technique using a small example.

متن کامل

Extending Security Requirement Patterns to Support Aspect-Oriented Risk-Driven Development

This paper presents a pattern representation of security concern solutions and their interactions that support aspect-oriented risk-driven development (AORDD). Security concern solutions are specified early in the development process, using UML as a rigorous notation for sets of patterns. A profile consisting of stereotypes and tagged values supports security concern requirement traceability th...

متن کامل

An aspect-oriented methodology for designing secure applications

We propose a methodology, based on Aspect-Oriented Modeling (AOM), for incorporating security mechanisms in an application. The functionality of the application is described using the primary model and the attacks are specified using aspects. The attack aspect is composed with the primary model to obtain the misuse model. The misuse model describes how much the application can be compromised. I...

متن کامل

Aspect-Oriented Modeling for Representing and Integrating Security Concerns in UML

Security is a challenging task in software engineering. Enforcing security policies should be taken care of during the early phases of the software development life cycle to more efficiently integrate security into software. To this end, we present in this paper an aspect-oriented modeling approach for specifying and integrating security solutions into UML design models. The proposed approach c...

متن کامل

An Aspect-Oriented Approach to Early Design Modeling

Developers of modern software systems are often required to build software that address security, fault-tolerance, and other dependability concerns. A decision to address a dependability concern in a particular manner can make it difficult or impossible to address other concerns in software. Proper attention to balancing key dependability and other concerns in the early phases of development ca...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2005