A Software Modeling Method for Integrating Functional and Security Design
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Security has become an essential part of the software development process. However, previous researches have not adequately integrated the security properties and policies into the development process systematically covering entirely from an early business model to a software model. This, in turn, makes it difficult to create the application models that combine the functional models and the security models. To support the development of the applications that reflects the security properties and policies, this study proposes a hierarchical modeling approach that integrates the metamodel, the framework, and the process based on the degree of abstraction of the development so as to meet the functional (business) and security requirements of the systems. This study aims to establish a framework and process for integrated modeling of the functional and security (non-functional) design aspects necessary to develop applications. The process of integrated modeling ranging from the business modeling to the software modeling is described following the development phases. With the proposed method, reliable systems can be developed by modeling the application systems more clearly based on the integrated method to meet the functional and security requirements.
Abstract
Security has become an essential part of the software development process. However, previous researches have not adequately integrated the security properties and policies into the development process systematically covering entirely from an early business model to a software model. This, in turn, makes it difficult to create the application models that combine the functional models and the security models. To support the development of the applications that reflects the security properties and policies, this study proposes a hierarchical modeling approach that integrates the metamodel, the framework, and the process based on the degree of abstraction of the development so as to meet the functional (business) and security requirements of the systems. This study aims to establish a framework and process for integrated modeling of the functional and security (non-functional) design aspects necessary to develop applications. The process of integrated modeling ranging from the business modeling to the software modeling is described following the development phases. With the proposed method, reliable systems can be developed by modeling the application systems more clearly based on the integrated method to meet the functional and security requirements.
참고문헌 (20)
- Korea Information Security Agency, "Development of software architecture-based design model and architecture specification method", ~ (2007)
- Korea Information Security Agency, "Security guide V1.0 for secure software development and Introduction", ~ (2008)
- A. Rodriguez, "A BPMN extension for the modeling of security requirements in business processes, IEICE TRANS", IEICE TRANS. INF. &SYST., E90-D(4), pp.745~751 (2007)
- C. Wolter, "Modelling security goals in business processes", Modellierung 2008 (2008)
- S. H. Turki, "Modeling security requirements in service based business processes", Enterprise, Business-Process and Information Systems Modeling, Lecture Notes in Business Information Processing, pp.76~90 (2012)
- Y. Cherdantseva, "Towards secureBPMN - aligning BPMN with the information assurance and security domain", business process model and notation, Lecture Notes in Business Information Processing, pp.107~115 (2012)
- M. Q. Saleem, "Secure business process modeling of SOA applications using UML-SOA-SEC", International Journal of Innovative Computing, Information and Control, 8(4), pp.2729~2746 (2012)
- H. Mouratidis, "Integrating security and software engineering: Advances and future vision" (2006), IGI Publishing Hershey
- D. G. Firesmith, "Security use cases", Journal of Object Technology, 2(3), pp.53~64 (2003)
- G. Popp, "Security-critical system development with extended use case", Tenth Asia-Pacific Software Engineering Conference, pp.478~487 (2003)
- L. L´ucioa, "Advances in model-driven security", pp.103~152 (2014), Advances in Computers
- P. H. Nguyen, "An extensive systematic review on the Model-Driven Development of secure systems", Information and Software Technology, 68, pp.62~81 (2015)
- D. Hatebur, "Systematic development of UMLsec design models based on security requirements", fundamental approaches to software engineering, 6603, pp.232~246 (2011), Springer
- D. Basin, "Model driven security: from UML models to access control infrastructures", Journal ACM Transactions on Software Engineering and Methodology (TOSEM), 15(1), pp.39~91 (2006)
- K. S. Joo, "Development of object-oriented analysis and design methodology for secure web applications", International Journal of Security and Its Applications, 8(1), pp.71~80 (2014)
- M. Bishop, "Computer security: art and science, Vol. 200" (2012), Addison-Wesley
- C. Y. Song, "An integrated design method for SOA-based business modeling and software modeling", International Journal of Software Engineering and Knowledge Engineering, 26(2), pp.347~377 (2016)
- C. Y. Song, "A layered metamodel for hierarchical modeling UML", International Journal of Software Engineering and Knowledge Engineering, 13(2), pp.191~214 (2003)
- 송치양, "서비스 지향 XL-BPMN 메타모델과 비즈니스 모델링 프로세스", 정보처리학회논문지. 소프트웨어 및 데이터 공학, 2(4), pp.227~238 (2013), 한국정보처리학회[DOI]
- Y. Rhazali, "Transformation method CIM to PIM: from business processes models defined in BPMN to use case and class models defined in UML", International Journal of Computer, Electrical, Automation, Control and Information Engineering, 8(8), pp.1453~1457 (2014)