development process with support of modeling, simulation, consistence
checking, code generation, verification, and testing. The formal
specifications in both UMLSec and AutoFocus can be used to verify
security requirements. This allows certification on the highest degree,