Modeling Secure Systems
Because this book is about how to build systems with UML, this might be a good place to briefly discuss appropriate ways to model the security interests of an application. In general, the security of a software system is defined by the countermeasures it implements. Five fundamental countermeasures and one organizing countermeasure are common to most secure systems:
Access control: Limiting system functionality to specific users.
Authentication: Identifying someone who has access rights to the system. Related to authentication is identification, which is the attempt to determine a specific identity.
Audit: Logging system activity, especially the activity of a system's users.
Intrusion detection: Detecting unauthorized ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access