Modeling Dynamic Role-based Access Constraints using the UML

Systematic development of security sensitive software requires that there be a sufficiently expressive linguistic extension to modeling languages. We propose an extension to the Unified Modeling Language (UML) to satisfy this need. Our extensions are to the UML metamodel with a security policy constraint specification and enforcement module, business tasks and a history log for method calls. Using these extensions we show how dynamic access control requirements of an application can be modeled during the design phas