Ad hoc wireless networking offers mobile computer users the prospect of trading with others in their vicinity anywhere anytime. This thesis explores the potential for developing such trading applications. A notable difficulty in designing their security services is being unable to use trusted parties. No one can be guaranteed present in each ad hoc wireless network session. A side benefit is that their costs don’t have to be paid for. A reference model is defined for ad hoc m-commerce and a threat model is formulated of its security vulnerabilities. They are used to elicit security objectives and requirements for such trading systems. Possible countermeasures to address the threats are critically analysed and used to design security services to mitigate them. They include a self-organised P2P identity support scheme using PGP certificates; a distributed reputation system backed by sanctions; a group membership service based on membership vouchers, quorate decisions by some group members and partial membership lists; and a security warning scheme. Security analysis of the schemes shows that they can mitigate the threats to an adequate degree to meet the trading system’s security objectives and requirements if users take due care when trading within it. Formal verification of the system shows that it satisfies certain safety properties.

A trading model and security regime for mobile e-commerce via ad hoc wireless networking

Information system drives every aspect of human endeavor, and it is a major stakeholder in human existence. Systems with poor modeling suffer a lot from poor implementation down to poor performance due to lack of critical subjection and testing. Software modeling is, therefore, of paramount importance in order to achieve a reliable system. There has been a lot of works done in software modeling, and eventually, the Universal Modeling Language was formulated to create a standard for software modeling. Although there have been some development or modeling tools that can be used to model a software system and the design then converted to software codes that can then be perfected, none of these tools has considered security and integrated as a single tool. Therefore, this paper focuses on building an integrated system (all-encompassing system) for building UMLsec-based modeled systems that will convert UML diagrams to code. The system integrates Eclipse Mars incorporated with Papyrus modeling plug-ins and Eclipse Kepler with Java EE incorporated with CARiSMA plug-ins. These four tools were integrated together by an executable application built with NetBeans. The system was tested by modeling an e-government system from the class diagram to analysis and code generation.

From Modeling to Code Generation: An Enhanced and Integrated Approach

UML has become a de-facto standard for design and development of object-oriented systems. On the other hand, UML includes various diagrams and notations which are missing of formal semantics. There does not exist much work to transform completely UML models to executable codes by any of the computer-aided software engineering tools because of the hidden semantics under the UML diagrams. Moreover, UML models cannot be used for automated analysis for validation and verification of the systems. Therefore, an integration of UML and semantics-based techniques such as formal methods is required to overcome such type of issues. Further, proof of correctness of software models plays a key role to ensure the quality of the final system to be developed. This paper presents a systematic method for transformation and verification of UML sequence diagrams into Z specification. The method works by translating and analysing few important combined fragments of sequence diagrams using Z notation. At first, formal specification of primary constructs is provided by capturing the hidden semantics under the diagram. Formal analysis of interaction operators namely options, alternatives, loops and break of the fragments is provided. The combined fragments are important because it allows multiple scenarios to increase an expressive power of sequence diagram by various control flows. Finally, formal analysis is provided by Z/Eves tool to check the syntax, type and proof for consistency and correctness of the specification.

Formal Specification and Verification of Few Combined Fragments of UML Sequence Diagram

Unified Modelling Language is a widely accepted in software development environment. Elder programs were often complex and large that need a frequent maintenance. To overcome this problem, object oriented analysis & design paradigm is adapted by many developers. To standardize this concept, object management group introduced Unified Modelling Language (UML). There is a list of growing UML based applications from design architecture of system, coding, testing to maintenance also. Code generation is one of the majorly used applications of UML diagrams. UML diagrams can be broadly divided into structural and behavioural based diagrams. In this paper, we are mainly concentrating on behavioural diagram of unified modelling language for code generation.

Exploration of UML diagrams based code generation methods

An Approach to UML Consistency Checking Based on Compositional Semantics

Formal verification of UML diagram is the act of proving or disproving the correctness of intended algorithms underlying a system with respect to a certain formal specification or property, using formal methods of mathematics. The most widely used techniques for system or software verification are: simulation and testing, deductive verification and Model checking. Model checking is a formal verification technique, in which an abstract model of a system is testing automatically to verify whether this model meets a given specification. SPIN Model checker is a popular open-source software tool used for the formal verification of distributed software systems. This article proposes a method for converting UML sequence diagrams with imbricate combined fragment automatically to PROMELA code to simulate the execution and to verify properties written in Linear Temporal Logic (LTL) with SPIN Model checker.

/pdf/automatic-generation-of-promela-code-from-sequence-diagram-11tdak2opp.pdf

Ahcen Menasria

Papers

Automatic generation of PROMELA code from sequence diagram with imbricate combined fragments