Abstract:
At the present time, the security requirements are crucial for the development of software. Requirements are usually in the form of natural language that is often ambiguous and conflict. Then if there is a mechanism to extract the security requirements in the form of a semi-formal language, this will make security requirements more clear and appropriate to the design and development of software. This thesis aims to introduce rules to convert the security requirements in the form of natural language to a semi-formal language which are suitable for the development of software. UML has been selected, including use case diagrams and sequence diagrams, to demonstrate the functionality of the software and the interaction behavior of objects to perform according to the security requirements. Both diagrams are constructed from analyzing security requirements in the form of natural language syntax coupled with security metadata, from 20 patterns, and extract the component structure of use case diagrams and sequence diagrams. In addition, the development of tools to support the application of rules to specify the security requirements help shorten the time to identify security requirements and to design UML diagrams in terms of use case diagrams and sequence diagrams. The correctness of the use case diagram and sequence diagram generated from our proposed rules are evaluated in both syntax and semantic criteria. In addition, the conformness to user requirements is assessed as well.