Towards Developing Secure Software Using Problem-Oriented Security Patterns - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2014

Towards Developing Secure Software Using Problem-Oriented Security Patterns

Résumé

Security as one essential quality requirement has to be addressed during the software development process. Quality requirements such as security drive the architecture of a software, while design decisions such as security patterns on the architecture level in turn might constrain the achievement of quality requirements significantly. Thus, to obtain sound architectures and correct requirements, knowledge which is gained in the solution space, for example from security patterns, should be reflected in the requirements engineering. In this paper, we propose an iterative method that takes into account the concurrent development of requirements and architecture descriptions systematically. It reuses security patterns for refining and restructuring the requirement models by applying problem-oriented security patterns. Problem-oriented security patterns adapt existing security patterns in a way that they can be used in the problem-oriented requirements engineering. The proposed method bridges the gap between security problems and security architectural solutions.
Fichier principal
Vignette du fichier
978-3-319-10975-6_4_Chapter.pdf (335.71 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01403985 , version 1 (28-11-2016)

Licence

Identifiants

Citer

Azadeh Alebrahim, Maritta Heisel. Towards Developing Secure Software Using Problem-Oriented Security Patterns. International Cross-Domain Conference and Workshop on Availability, Reliability, and Security (CD-ARES), Sep 2014, Fribourg, Switzerland. pp.45-62, ⟨10.1007/978-3-319-10975-6_4⟩. ⟨hal-01403985⟩
76 Consultations
135 Téléchargements

Altmetric

Partager

More