Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Security requirements are properties that have to be guaranteed for an application. Such guarantees can be given using verification. But there is a huge gap beten security requirements expressed with human language and formal security properties that can be verified.  presents the use of OCL to formalize security requirements in a model-driven approach for security-critical applications. SecureMDD is such a model-driven approach. It uses UML to model the application and OCL to specify the security requirements. From the application model and the contained OCL constraints, a formal specification of the application including the security properties is generated automatically. This specification is used to verify application-specific security properties that matches a lot of security requirements much better than application-independent security properties like secrecy, integrity and confidentiality.  demonstrate how to concretize security requirements as ll as the use of OCL constraints to specify security requirements, the transformation from OCL constraints into algebraic specifications and the use of those specifications to verify the security requirements using an electronic ticketing system as a case study.
['Marian Borek', 'Nina Moebius', 'Kurt Stenzel', 'Wolfgang Reif']
I am writing a research paper on a idea Security requirements formalized with OCL in a model-driven approach
[{"from": "human", "value": "I am writing a research paper on a idea Security requirements formalized with OCL in a model-driven approach"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Security requirements are properties that have to be guaranteed for an application. Such guarantees can be given using verification. But there is a huge gap beten security requirements expressed with human language and formal security properties that can be verified.  presents the use of OCL to formalize security requirements in a model-driven approach for security-critical applications. SecureMDD is such a model-driven approach. It uses UML to model the application and OCL to specify the security requirements. From the application model and the contained OCL constraints, a formal specification of the application including the security properties is generated automatically. This specification is used to verify application-specific security properties that matches a lot of security requirements much better than application-independent security properties like secrecy, integrity and confidentiality.  demonstrate how to concretize security requirements as ll as the use of OCL constraints to specify security requirements, the transformation from OCL constraints into algebraic specifications and the use of those specifications to verify the security requirements using an electronic ticketing system as a case study."}]