MASC: Modelling Architectural Security Concerns


Security decisions are an important part of software architecture design, and thus deserve to be explicitly represented in the design documentation. While UML is the best-known language for creating such documentation, it lacks security specific notations, which makes it difficult to represent the effect of the security decisions. Several security extensions for UML exist in the literature, but they represent security concerns at a lower level of abstraction, or only support a limited subset of security concerns. We propose a new notation, MASC, to model security concerns at the architectural level. It has been designed as an extension of UML, and is based on recurring security concepts that have been distilled from well-known security principles, goals, and patterns. By using our notation, a designer obtains a technique to express security concerns more explicitly in the architectural design documentation.

Extracted Key Phrases

10 Figures and Tables

Cite this paper

@article{Sion2015MASCMA, title={MASC: Modelling Architectural Security Concerns}, author={Laurens Sion and Koen Yskout and Alexander van Den Berghe and Riccardo Scandariato and Wouter Joosen}, journal={2015 IEEE/ACM 7th International Workshop on Modeling in Software Engineering}, year={2015}, pages={36-41} }