Using UMLsec and goal trees for secure systems development

Abstract

Today many software systems need to take into account security considerations. While Software Engineering has been quite successful in ensuring that systems satisfy non-functional requirements such as dependability, less work has been done wrt. security requirements.In this work we present a software engineering method aiming to facilitate secure systems development, which is based on an extension of UML called UMLsec.