웹 응용 시스템 개발을 위한 보안을 고려한 통합 분석·설계 방법론 개발 = Oracle11g를 중심으로

다국어 초록 (Multilingual Abstract)

In the development process of application systems, the most important works are analysis and design. Most of the application systems are implemented on database system. So, database design is important. Also, IT System are confronted with more and more attacks by an increase interconnections between IT systems. Therefore security-related processes belong to a very important process. Security is a complex non-functional requirement that can interaction of many parts in the system. But Security is considered in the final stages of development. Therefore, Their increases the potential for the final product to contain vulnerabilities. Accordingly, Early in development related to security analysis and design process is very important. J2EE gives a solution based on RBAC((Role Based Access Control) for security and object-relational database also has RBAC for security. But there is not a object-oriented analysis and design methodology using RBAC of J2EE and object-relational database for security. In this paper, the unified object-oriented analysis and design methodology is developed for security-critical web application systems based on J2EE and object-relational database. We used UMLsec and RBAC of object-relational database and J2EE for this methodology.

참고문헌 (Reference)

1 주경수, "관계형 데이터베이스 응용시스템을 위한 통합 설계방법론 개발-객체지향 분석·설계 방법론을 중심으로-" 한국컴퓨터정보학회 16 (16): 25-34, 2011

2 주경수, "객체-관계형 데이터베이스 설계를 위한 UML 확장-Oracle11g를 중심으로-" 한국인터넷정보학회 12 (12): 149-159, 2011

3 Madan, s, "security Standards Perspective to Fortify Web Database Applications From Code Injection Attacks" 226-230, 2010

4 Cho Wan-su, "UML 2 & UP Object-Oriented Analysis&design" Hongrung Publishing Company 2005

5 G. Popp, "Security-Critical System Development withExtended Use Case" 2003

6 Khaleel Ahmad, "Policy Levels Concerning Database Security" 2 (2): 2011

7 "Oracle 11g SQL Reference Release 2 (11.2)"

8 Chae Heung-Seok, "Object-oriented CDB Project for UML and Java as learning" Hanbit Media. Inc 290-960, 2009

9 Han Jeong-Su, "Introduction to UML : Object-Oriented Design as in a friendly learning" Hanbit Media. Inc 58-66, 2009

10 "ISO/IEC 9075-11:2008"

11 Kathy Sierra, "Head First Servlet & JSP" Hanbit Media. Inc 2009

12 Brett D. McLaughlin, "Head First Object Oriented Analysis & Design" Hanbit Media. Inc 96-103, 2007

13 lqra Basharat, "Database Security and Encryption: A Survey Study" 47 (47): 2012

14 E. Marcos, "Aggregation and Composition in Object-Relational Database Design" 2001

15 E. Marcos, "A Methodology for Object-Relational Database Design Using UML" 2001