Analyzing Impacts on Software Enhancement Caused by Security Design Alternatives with Patterns

paper index | HOME

Title: Analyzing Impacts on Software Enhancement Caused by Security Design Alternatives with Patterns
Author(s): Takao Okubo, Haruhiko Kaiya, and Nobukazu Yoshioka.
Source: International Journal of Secure Software Engineering (IJSSE), IGI Global, Vol. 3, No. 1, pp. 37-61, Jan.-Mar. 2012. DOI: 10.4018/jsse.2012010103.

Abstract:
Unlike functional implementations, it is difficult to analyze the impact on security of software enhancements. One of the difficulties is identifying the range of effects on existing software from new security threats, and the other is developing proper countermeasures. The authors propose an analysis method that uses two kinds of security patterns: security requirements patterns for identifying threats and security design patterns for identifying countermeasures at an action class level. With these two patterns and the conventional traceability methodology, developers can estimate and compare the amount of modifications needed for multiple security countermeasures.

BibTeX Entry:

@Article(,
    Title="{Analyzing Impacts on Software Enhancement Caused by Security Design Alternatives with Patterns}",
    Author="Takao Okubo and Haruhiko Kaiya and Npbukazu Yoshioka",
    Journal="International Journal of Secure Software Engineering (IJSSE)",
    Year="2012",
    Volume="3",
    Number="1",
    Pages="37-61",
    DOI="10.4018/jsse.2012010103",
    Month="Jan.-Mar.",
    Publisher="IGI Global",
    Note="http://www.igi-global.com/ijsse/"
)