DETECTING WEB SECURITY RISKS WITH UML DESIGN MODELS

摘要

Both legitimate users and attackers use resources to realizerntheir goals. These goals are either desired or malicious inrnterms of the role of users. This paper presents a novelrnapproach for detecting web security risks by focusing on thernresources used/exploited by both legitimate users andrnattackers. To systematically detect security risks of webrnapplications, first, security risks have been formally definedrnin terms of web resources, then, behavioral risk models arernconstructed based on UML design models. Security risks ofrna web application are identified and organized in terms ofrnuse case scenarios derived from the behavioral risk models.