Secure Systems Development with UML

Jan Jürjens

ISBN 10: 3642056350 / ISBN 13: 9783642056352

Published by Springer-Verlag Berlin and Heidelberg GmbH and Co. KG, DE, 2010

About this Item

Attacks against computer systems can cause considerable economic or physical damage. High-quality development of security-critical systems is difficult, mainly because of the conflict between development costs and verifiable correctness.Jürjens presents the UML extension UMLsec for secure systems development. It uses the standard UML extension mechanisms, and can be employed to evaluate UML specifications for vulnerabilities using a formal semantics of a simplified fragment of UML. Established rules of security engineering can be encapsulated and hence made available even to developers who are not specialists in security. As one example, Jürjens uncovers a flaw in the Common Electronic Purse Specification, and proposes and verifies a correction.With a clear separation between the general description of his approach and its mathematical foundations, the book is ideally suited both for researchers and graduate students in UML or formal methods and security, and for advanced professionals writing critical applications. Softcover reprint of hardcover 1st ed. 2005.

Seller Inventory # LU-9783642056352

Bibliographic Details

• Title: Secure Systems Development with UML
• Publisher: Springer-Verlag Berlin and Heidelberg GmbH and Co. KG, DE
• Publication Date: 2010
• Language: English
• ISBN 10: 3642056350
• ISBN 13: 9783642056352
• Binding: Paperback
• Condition: New

About this title

Synopsis

The extension UMLsec of the Unified Modeling Language for secure systems development is presented in this text. The book is written in a way which keeps the first part accessible to anyone with a basic background on object-oriented systems. The second part covers the mathematical tools needed to use the UMLsec approach to verify UML specifications against security requirements. It can also be used as part of a general course on applying UML or on computer security. A practically relevant example is used throughout the book to demonstrate the presented methods.