Aspect-oriented model
The metamodel for aspect-oriented modelling of security threats.
Specurity Aspects
Specification Elements
Name
Description
Encapsulates a group of pointcut, advice, and introduction specifications.
A join point is a well-defined point (e.g. method-call) in the flow of a program.
Selects particular join points by filtering out a subset of all join points, based on defined criteria.
Defines additional code to be executed at the join points that match the pointcut specification
Introduces new members to base modules.
Security Aspects
Security threat modeling
Specifies the behavior of security threats.- Specification Elements:
- Aspect
- Join Point
- Pointcut
- Advice
- Introduction
- Threats:
- Spoofing
- Tampering with Data
- Repudiation
- Information Disclosure
- Denial of Service
- Elevation of Privileges
Specification Elements
Aspect
Encapsulates a group of pointcut, advice, and introduction specifications.- Applies to:
- Entity
Join point
A join point is a well-defined point (e.g. method-call) in the flow of a program.Pointcut
Selects particular join points by filtering out a subset of all join points, based on defined criteria.- Applies to:
- Activity
Advice
Defines additional code to be executed at the join points that match the pointcut specification- Applies to:
- Activity
Introduction
Introduces new members to base modules.- Applies to:
- Entity