loading...
Modeling Input Validation in UML
March 26-March 28
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ASWEC.2008.3019th Australian Conference on Softwar ...
 This Article 
 
PDF
HTML
IEEE Xplore Subscribers
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Security is an integral part of most software systems but it is not considered as an explicit part in the development process yet. Input validation is the most critical part of software security that is not covered in the design phase of software development life-cycle resulting in many security vulnerabilities. Our objective is to extend UML to new integrated framework for model driven security engineering leading to ideal way to design more secure software. Input validation in UML has not been addressed previously, hence we incorporate input validation into UML diagrams such as use case, class, sequence and activity. This approach has some advantages such as preventing from common input tampering attacks, having both security and convenience in software at high level of abstraction and ability of solving the problem of weak security background for developers.
Index Terms:
Software engineering, Software security, Input validation, Unified Modeling Language, Object Constraint Language
Citation:
Pedram Hayati, Nastaran Jafari, S. Mohammad Rezaei, Saeed Sarenche, Vidyasagar Potdar, "Modeling Input Validation in UML," aswec, pp.663-672, 19th Australian Conference on Software Engineering (aswec 2008), 2008
Usage of this product signifies your acceptance of the Terms of Use.