Software security concerns modeling method based on UML extension

Abstract

Software security has an enormous impact on almost all areas ranging from general software systems to security critical systems. The traditional measures such as firewalls cannot fundamentally solve the problem of software security. The major focus of software security has transferred to highly secure design of software systems. A number of modeling methodologies have been proposed to address the problem of software security. These approaches improve the security of software but to some extent increase the complexity of system. Security concerns as stakeholder's interests can be used to resolve this problem. This paper presents a modeling approach for security concerns and their relationships. This method extends UML to support aspect-oriented modeling and considers security concerns as aspects. It also describes the association analysis among security concerns used by UML stereotypes. © 2014 Taylor & Francis Group, London, UK.