Skip to main content
SpringerLink
Log in

Model-Based Security Engineering for Real

  • Conference paper
FM 2006: Formal Methods (FM 2006)

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 4085))

Included in the following conference series:

Abstract

We give an overview over a soundly based secure software engineering methodology and associated tool-support developed over the last few years under the name of Model-based Security Engineering (MBSE). We focus in particular on applications in industry.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 84.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 109.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Burrows, M., Abadi, M., Needham, R.: A logic of authentication. Proceedings of the Royal Society, Series A 426(1871), 233–271 (1989)

    Article  MATH  MathSciNet  Google Scholar 

  2. Clarke, E., Wing, J.: Formal methods: State of the art and future directions. ACM Computing Surveys 28(4), 626–643 (1996)

    Article  Google Scholar 

  3. Devanbu, P., Stubblebine, S.: Software engineering for security: a roadmap. In: The Future of Software Engineering (ICSE 2000), pp. 227–239 (2000)

    Google Scholar 

  4. Heitmeyer, C.: Formal methods for developing software specifications: Paths to wider usage. In: Arabnia, H.R. (ed.) PDPTA 1999 (1999)

    Google Scholar 

  5. Hoare, C.A.R.: How did software get so reliable without proof? In: Gaudel, M.-C., Woodcock, J.C.P. (eds.) FME 1996. LNCS, vol. 1051, pp. 1–17. Springer, Heidelberg (1996)

    Google Scholar 

  6. Jürjens, J.: UMLsec: Extending UML for secure systems development. In: Jézéquel, J.-M., Hussmann, H., Cook, S. (eds.) UML 2002. LNCS, vol. 2460, p. 412. Springer, Heidelberg (2002)

    Google Scholar 

  7. Jürjens, J.: Secure Systems Development with UML. Springer, Heidelberg (2004)

    Google Scholar 

  8. Jürjens, J.: Code security analysis of a biometric authentication system using automated theorem provers. In: ACSAC 2005. IEEE, Los Alamitos (2005)

    Google Scholar 

  9. Jürjens, J.: Sound methods and effective tools for model-based security engineering with UML. In: 27th Int. Conf. on Softw.  Engineering. IEEE Computer Society Press, Los Alamitos (2005)

    Google Scholar 

  10. Jürjens, J.: Security analysis of crypto-based Java programs using automated theorem provers. In: 21st IEEE/ACM Int. Conf. Autom. Softw. Eng. (2006)

    Google Scholar 

  11. Jürjens, J.: IT-Security. Springer, Heidelberg (in preparation, 2007)

    Google Scholar 

  12. Kilian-Kehr, R.: Can formal verification become mainstream in software engineering? In: Jürjens, J. (ed.) 2nd Works. of the GI-WG FoMSESS (2004)

    Google Scholar 

  13. Kemmerer, R., Meadows, C., Millen, J.: Three systems for cryptographic protocol analysis. Journal of Cryptology 7(2), 79–130 (1994)

    Article  MATH  Google Scholar 

  14. Lowe, G.: Breaking and fixing the Needham-Schroeder public-key protocol using FDR. Software Concepts and Tools 17(3), 93–102 (1996)

    Google Scholar 

  15. Paulson, L.C.: The inductive approach to verifying cryptographic protocols. Journal of Computer Security 6(1–2), 85–128 (1998)

    Google Scholar 

  16. UMLsec group. Security analysis tool (2004), http://www.umlsec.org

Download references

Author information

Authors and Affiliations

  1. Software & Systems Engineering, Dep. of Informatics, TU Munich, Germany

    Jan Jürjens

Authors
  1. Jan Jürjens
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. The University of Texas at Austin,  

    Jayadev Misra

  2. Institut für Informatik, Technische Universität, München,  

    Tobias Nipkow

  3. Department of Computing and Software, McMaster University, 1280 Main Street West, L8S 4K1, Hamilton, Ontario, Canada

    Emil Sekerinski

Rights and permissions

Reprints and permissions

Copyright information

© 2006 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Jürjens, J. (2006). Model-Based Security Engineering for Real. In: Misra, J., Nipkow, T., Sekerinski, E. (eds) FM 2006: Formal Methods. FM 2006. Lecture Notes in Computer Science, vol 4085. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11813040_42

Download citation

  • DOI: https://doi.org/10.1007/11813040_42

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-37215-8

  • Online ISBN: 978-3-540-37216-5

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation