Grupo Alarcos · Conference paper · 2001

Specification of security constraint in UML

Eduardo Fernández-Medina Patón, Mario Piattini Velthuis, Manuel Ángel Serrano Martín

Proceedings IEEE 35th Annual 2001 International Carnahan Conference on Security Technology (Cat. No.01CH37186) · 2001 · 11 citations (OpenAlex)

In recent years various initiatives for solving the problem of security in databases have arisen. However, all of them have been only partial solutions which resolved isolated problems. Consequently, a global solution to the problem has not been reached yet. We believe that a methodological approach in which security is taken into consideration from the earliest stages of the development process of the databases is the best strategy. The authors present a language for specifying security constraints in models of classes, which is one step to a complete methodology for the development of secure multilevel databases. This language is called OSCL (Object Security Constraint Language). OSCL is based on the constraint language OCL (Object Constraint Language), which is used by the current standard of modeling, UML (Unified Modeling Language).