Abstract: Since the security features described by natural language in the safety-critical software requirements specification are of inaccuracy and inconsistence, a validation method of security features based on UMLsec was proposed. The method completed the UMLsec model by customizing stereotypes, tags and constraints for security features of the core class on the basis of class diagram and sequence diagram for UML requirements model. Afterwards, the support tool for designing and implementing UMLsec was used for automatic verification of security features. The experimental results show that the proposed method can accurately describe security features in the safety-critical requirements specification and can automatically verify whether the security features meet the security requirements.

Key words: UMLsec, security feature, verification

摘要： 针对自然语言描述的安全苛求软件需求规格中安全特性不准确、不一致等问题，提出一种基于UMLsec安全特性验证方法。该方法在UML需求模型类图和顺序图的基础上，为核心类的安全特性自定义构造型、标记和约束，完成UMLsec模型构建；之后，使用设计实现的UMLsec支持工具对安全特性进行自动验证。实验结果表明，该方法能准确描述安全苛求软件需求规格的安全特性，同时可以自动验证安全特性是否满足安全需求。

关键词: UMLsec, 安全特性, 验证