Performance analysis of security aspects in UML models

Abstract

The focus of the paper is on the analysis of performance effects of different security solutions modeled as aspects in UML. Aspect oriented modeling (AOM) allows software designers to isolate and separately address solutions for crosscutting concerns, which are defined as distinct UML aspect models, then are composed with the primary UML model of the system under development. For performance analysis we use techniques developed previously in the PUMA project, which take as input UML models annotated with the standard UML Profile for Schedulability, Performance and Time (SPT), and transform them first into Core Scenario Model (CSM) and then into different performance models. The contribution of this paper is in performing the composition of the aspects with the primary model at the CSM level. The input is represented by the primary model and a number of aspect models in UML+SPT, which are processed as follows: a) converted separately to CSM; b) composed into a single CSM model; c) transformed into a Layered Queueing Networks (LQN) model and d) analyzed. The proposed approach is illustrated with a case study based on two standards, TPC-W and SSL.

XRound: A reversible template language and its application in model-based security analysis

“…Models of crosscutting concerns (called aspects) are woven with system models via an automated process. The application of aspect-oriented modeling to security analysis is considered by Petriu et al [20] and Houmb et al [21]. These approaches differ from the work presented in this paper by focusing more on the development of security artifacts and supporting analysis, rather than being able to reflect the results of analysis in system models.…”

nformation and data protection within a RDBMS

“…In order to transform the already discussed deployment architecture [9] into UML deployment models, we should use the developed UML approach for Access Control Infrastructures analyses in [11] and UML models for information systems performance analyses in [16]. The primary model represents the basic functionality without any security mechanisms.…”

“…The primary model represents the basic functionality without any security mechanisms. The components of a web-system are logically divided into three tiers: a) a set of emulated web browsers (EB), b) web tier including Web Servers, Image Servers and Web Caches and c) persistent storage [16]. Figure 1 presents a general UML deployment diagram of the feasible Information System, investigated in the [9].…”

“…From the models, the access control infrastructures for server-based applications can be automatically generated, built from declarative and programmatic access control mechanisms [11]. The next UML diagram in figure 2 shows an example of scenario GetInformationPage with extra encryption implementation and time delays for the encryption/decryption of the information, compare with [16]. In accordance with our research, the encryption/decryption process can be the most consumable part of a system performance and can create very high workload for the data processing.…”

Modeling and Integrating Aspects into Component Architectures

“…However there is considerable research on recovery block modeling [7][8] [9][13] [14] and AOM application to features like security [10], performance [12][10], access control [11].…”