Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices - IRISA_UBS Access content directly
Conference Papers Year : 2014

Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices

Abstract

Security-by-design considers security throughout the whole development lifecycle, to detect and fix potential issues as early as possible. With this approach, the software architect should assess some security level of the software architecture, to predict whether the software under development will have security issues. Previous works proposed several metrics to measure the attack surface, the attackability, and the satisfaction of security requirements on the software architecture. However, proving the correlation between these metrics and security is far from trivial. To circumvent this difficulty, we propose new metrics rooted in CWE, NIST guidelines and security patterns. So, our four novel metrics measure the conformance of the software architecture to these acknowledged security-related recommendations. The usage of our metrics is evaluated with case studies.
Fichier principal
Vignette du fichier
MODELSWARD_2024___Monica.pdf (366.38 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04560293 , version 1 (26-04-2024)

Identifiers

Cite

Monica Buitrago, Isabelle Borne, Jérémy Buisson. Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices. 12th International Conference on Model-Based Software and Systems Engineering, Feb 2024, Rome, Italy. pp.117-124, ⟨10.5220/0012312400003645⟩. ⟨hal-04560293⟩
0 View
0 Download

Altmetric

Share

Gmail Facebook X LinkedIn More