Motii, Anas and Hamid, Brahim and Lanusse, Agnes and Bruel, Jean-Michel Guiding the selection of security patterns based on security requirements and pattern classification. (2015) In: 20th European Conference on Pattern Language of Programs (EuroPlop 2015), 6 July 2015 - 10 July 2015 (Kloster Irsee, Germany).
|
(Document in English)
PDF (Author's version) - Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader 923kB |
Official URL: http://dx.doi.org/10.1145/2855321.2855332
Abstract
Security pattern-based system and software engineering (PBSE) approaches aim at building secure software and systems by capturing and reusing artifacts that encapsulate security expert's knowledge called security patterns. In this context, security patterns are selected by developers based on security requirements. On the other hand, security risk management is an iterative approach that consists of: (1) a risk assessment activity for identifying, analyzing and evaluating security risks and (2) a risk treatment activity to mitigate these risks which result in issuing security requirements. Hence, risk management and security PBSE can be used together. In this context, this paper aims at guiding the selection of security patterns in security PBSE based on security risk management results and pattern classification. For illustration purposes, we consider an example of a SCADA (Supervisory Control And Data Acquisition) system.
Repository Staff Only: item control page