A Unified Object-Oriented Analysis and Design Methodology for Secure Web

Abstract

This paper proposes an integrated object-oriented analysis and design methodology for secure web application based on database. The proposed integrated object-oriented analysis and design methodology use the security emphasized modelling language, UMLsec and uses O-R (Object-Relational) mapping for relational database design. Also, RBAC (Role-based Access Control) is applied using Java Servlet and SQL when we implement the results of analysis and design. To prove the efficacy of our method, we applied it to a development of banking system as an example.