Risk-driven development of securitycritical systems using UMLsec

Abstract

Despite a growing awareness of security issues in distributed computing systems, most development processes used today still do not take security aspects into account. To address this problem we make use of a risk-driven approach to develop security-critical systems based on UMLsec, the extension of the Unified Modeling Language (UML) for secure systems development, the safety standard ICE 61508, and the concept of model-based risk assessment (MBRA). Security requirements are handled as an integrated part of the development and derived from enterprize information such as security policies, business goals, law and regulation as well as project specific security demands. These are then updated and refined in each iteration of the process and finally refined to security requirements at a technical level, which can be expressed using UMLsec, and analyzed mechanically using the tool-support for UMLsec by referring to a precise semantics of the used fragment of UML. © 2004 Springer Science + Business Media, Inc.