Orest Pilskalns Anneliese Amschler Andrews Using UML Designs to Generate OCL for Security Testing. 505-510 2006 conf/seke/2006 SEKE db/conf/seke/seke2006.html#PilskalnsA06