Model Driven Security: From UML Models to Access Control Infrastructres

Requirements affecting security are often poorly integrated in the overall system software development process. Reasons for this may be differences in the activities carried out to achieve the project goal or the kind of used representations (text vs. graphical representation). As a consequence the security engineering part, which deals with the mentioned security sensitive aspects, is often carried out decoupled and parallel to the system design engineering development process (see Figure 1).