View Item 

Modeling input validation in UML

Access Status
Open access
Authors
Hayati, P.
Jafari, N.
Rezaei, S. M.
Sarenche, S.
Potdar, Vidyasagar
Date
2008
Type
Conference Paper

Metadata
Show full item record
Citation
Hayati, Pedram and Jafari, Nastaran and Rezaei, S mohammad and Sarenche, Saeed and Potdar, Vidyasagar. 2008. Modeling input validation in UML, in Farookh Hussain and Elizabeth Chang (ed), 19th Australian Software Engineering Conference (ASWEC 2008), Mar 25 2008, pp. 663-672.Perth, Australia: IEEE Computer Society
Source Title
Proceedings of the 19th Australian software engineering conference (ASWEC 2008)
Source Conference
19th Australian Software Engineering Conference (ASWEC 2008)
DOI
ISSN
School
Centre for Extended Enterprises and Business Intelligence
Remarks

Copyright © 2008 IEEE

This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. In most cases, these works may not be reposted without the explicit permission of the copyright holder.

URI
Collection
Abstract

Security is an integral part of most software systems but it is not considered as an explicit part in the development process yet. Input validation is the most critical part ofsoftware security that is not covered in the design phase of software development life-cycle resulting in many security vulnerabilities. Our objective is to extend UML to new integrated jramework for model driven security engineering leading to ideal way to design more secure software. Input validation in UML has not been addressed previously, hence we incorporate input validation into UML diagrams such as use case, class, sequence and activity. This approach has some advantages such as preventing jrom common input tampering attacks, having both security and convenience in software at high level of abstraction and ability of solving the problem ofweak security backgroundfor developers.