Login | Register

Aspect-Oriented Modeling for Representing and Integrating Security Aspects in UML Models

Title:

Aspect-Oriented Modeling for Representing and Integrating Security Aspects in UML Models

Venkatesh, Srivas (2013) Aspect-Oriented Modeling for Representing and Integrating Security Aspects in UML Models. Masters thesis, Concordia University.

[img]
Preview
Text (application/pdf)
Venkatesh_MASc_F2014.pdf - Accepted Version
2MB

Abstract

Security is a challenging task in software engineering. Traditionally, addressing security concerns are considered as an afterthought to the development process and security mechanisms are fitted into pre-existing software without considering the consequences on the main functionality of the software. Enforcing security policies should be taken care of during early phases of the software development life cycle; this benefits the development costs and reduces the maintenance time. In addition to cost saving, this encourages development of reliable software. Since security related concepts will be considered in each step of the design, the implications of inserting such concepts into the existing system requirements will help mitigate the defects and vulnerabilities present in the system. Although integrating security solutions into every stage of the software development cycle, results in scattering and tangling of security features across the entire design. The traditional security hardening approaches are tedious and prone to many errors as they involve manual modifications. In this context, the need for a systematic way to integrate security aspects/mechanisms into the design phase of the development cycle should be considered.
In this work, an aspect-oriented modeling approach for specifying and integrating security aspects in to Unified Modeling Language (UML) design model is presented. This approach allows the security experts to specify generic security aspects and weave them into target software base model early in the software development phase. In contrast to traditional approaches, model-to-model transformation mechanisms discussed in this approach are designed to have an efficient and a fully automatic weaving process. This work further discusses additional components that are introduced into the weaving process. These newly introduced components allow the security experts to provide more appropriate security hardening concepts. Furthermore, the additional components are designed based on object-oriented principles and allow the security experts to exercise these principles in the model-to-model transformation. The additions to the weaver application are tested using the Session Initiation Protocol (SIP) communicator as a base model. The description of the additional components and the results of testing of the weaving process are discussed further in this thesis.

Divisions:Concordia University > Gina Cody School of Engineering and Computer Science > Concordia Institute for Information Systems Engineering
Concordia University > Research Units > Computer Security Laboratory
Item Type:Thesis (Masters)
Authors:Venkatesh, Srivas
Institution:Concordia University
Degree Name:M.A. Sc.
Program:Information Systems Security
Date:28 July 2013
Thesis Supervisor(s):Debabbi, Mourad
Keywords:UML , Aspect-Oriented, AOM , Security
ID Code:977836
Deposited By: SRIVAS VENKATESH
Deposited On:30 Sep 2014 16:54
Last Modified:18 Jan 2018 17:45
All items in Spectrum are protected by copyright, with all rights reserved. The use of items is governed by Spectrum's terms of access.

Repository Staff Only: item control page

Downloads per month over past year

Back to top Back to top