UMLsec

UMLsec is an extension to the Unified Modeling Language for integrating security related information in UML specifications.

It was first proposed by Jürjens et al. in 2002[1] and later revised and extended by the same author.

[3] The profile is defined through a set of prototypes with properties (tag definitions) and constraints.

To ensure security it is necessary to specify what kind of attacker is assumed.

In UMLsec, the attacker model is defined through the threats that it poses.