OATAO - Open Archive Toulouse Archive Ouverte Open Access Week

Guiding the selection of security patterns based on security requirements and pattern classification

Motii, Anas and Hamid, Brahim and Lanusse, Agnes and Bruel, Jean-Michel Guiding the selection of security patterns based on security requirements and pattern classification. (2015) In: 20th European Conference on Pattern Language of Programs (EuroPlop 2015), 6 July 2015 - 10 July 2015 (Kloster Irsee, Germany).

[img]
Preview
(Document in English)

PDF (Author's version) - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
923kB

Official URL: http://dx.doi.org/10.1145/2855321.2855332

Abstract

Security pattern-based system and software engineering (PBSE) approaches aim at building secure software and systems by capturing and reusing artifacts that encapsulate security expert's knowledge called security patterns. In this context, security patterns are selected by developers based on security requirements. On the other hand, security risk management is an iterative approach that consists of: (1) a risk assessment activity for identifying, analyzing and evaluating security risks and (2) a risk treatment activity to mitigate these risks which result in issuing security requirements. Hence, risk management and security PBSE can be used together. In this context, this paper aims at guiding the selection of security patterns in security PBSE based on security risk management results and pattern classification. For illustration purposes, we consider an example of a SCADA (Supervisory Control And Data Acquisition) system.

Item Type:Conference or Workshop Item (Paper)
Additional Information:Thanks to Association for Computing Machinery (ACM ) editor. The definitive version is available at http://dl.acm.org This papers appears in EuroPLoP '15 ISBN: 978-1-4503-3847-9 The original PDF is available at: http://dl.acm.org/citation.cfm?id=2855332
HAL Id:hal-01567086
Audience (conference):International conference proceedings
Uncontrolled Keywords:
Institution:French research institutions > Commissariat à l'Energie Atomique et aux énergies alternatives - CEA (FRANCE)
French research institutions > Centre National de la Recherche Scientifique - CNRS (FRANCE)
Université de Toulouse > Institut National Polytechnique de Toulouse - INPT (FRANCE)
Université de Toulouse > Université Toulouse III - Paul Sabatier - UPS (FRANCE)
Université de Toulouse > Université Toulouse - Jean Jaurès - UT2J (FRANCE)
Université de Toulouse > Université Toulouse 1 Capitole - UT1 (FRANCE)
Laboratory name:
Statistics:download
Deposited By: IRIT IRIT
Deposited On:07 Jul 2017 13:55

Repository Staff Only: item control page