Modeling and Analyzing Security Patterns Using High Level Petri Nets

He, Xudong; Fu, Yujian

doi:10.18293/seke2016-010

Cited by 3 publications

(4 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Section: Related Workmentioning

confidence: 99%

“…He and Fu [22] modelled and analysed six security patterns, namely, account lockout, authenticated session, client data storage, encrypted storage, password authentication, and password propagation, to check their completeness, consistency, and ambiguity in their textual descriptions. He and Fu [22] used high-level petri nets to ensure the correct implementation of these six security patterns. Near and Jackson [23] showed that previously unknown security bugs could be easily identified using their proposed formal approach SPACE (Security Pattern Checker), which finds implementation bugs in access control security patterns.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

An Approach for Verification of Secure Access Control Using Security Pattern

Gupta

Singh

Mohapatra

2022

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

According to OWASP-2021, more than 3,00,000 web applications have been detected for unauthenticated and unauthorised access leading to a breach of security trust. Security patterns are commonly used in web applications to address the problem of broken access. Web developers are not experts in implementing security patterns. Therefore, it is necessary to verify that the security pattern has been applied, specifying the original intent of the security pattern. In this paper, an approach has been proposed that analyses the behavioural aspect of security patterns to verify that it meets the security requirement of the web application. The proposed approach extracts the class diagram’s structural properties, relations, associations, and security-related constraints and verifies it using the first-order predicate logic. Experiments have been conducted using class diagrams of security patterns to detect instances of broken access control early in the design phase. The proposed approach will help minimise the risk of unauthenticated and unauthorised access to a web application.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

An Approach for Verification of Secure Access Control Using Security Pattern

Gupta

Singh

Mohapatra

2022

Wireless Communications and Mobile Computing

View full text Add to dashboard Cite

show abstract

“…Five security patterns were studied. • using High Level Petri-nets [16] and Colored Petri-nets [17] to model security patterns and to combine security patterns with existing models [11], [12]. The above works either focus on the individual security patterns or treat the composition of security patterns as a whole system.…”

Section: A Verification Of Security Patternsmentioning

confidence: 99%

Pattern-Based Approach to Modelling and Verifying System Security

Zheng

Zhu

et al. 2020

2020 IEEE International Conference on Service Oriented Systems Engineering (SOSE)

View full text Add to dashboard Cite

Security is one of the most important problems in the engineering of online service-oriented systems. The current best practice in security design is a pattern-oriented approach. A large number of security design patterns have been identified, categorised and documented in the literature. The design of a security solution for a system starts with identification of security requirements and selection of appropriate security design patterns; these are then composed together. It is crucial to verify that the composition of security design patterns is valid in the sense that it preserves the features, semantics and soundness of the patterns and correct in the sense that the security requirements are met by the design. This paper proposes a methodology that employs the algebraic specification language SOFIA to specify security design patterns and their compositions. The specifications are then translated into the Alloy formalism and their validity and correctness are verified using the Alloy model checker. A tool that translates SOFIA into Alloy is presented. A case study with the method and the tool is also reported.

show abstract

“…5), including Ambient Intelligence Environments, Business Process Management (BPM), and Multi-Agent Systems (MAS). Most reports use general platforms like the web, cloud, and distributed system.A few papers address Cyber Physical Systems (CPS) and the Internet of Things (IoT)[227,233]. However, various IoT security patterns are emerging.…”

mentioning

confidence: 99%

Systematic Literature Review of Security Pattern Research

Washizaki¹,

Xia²,

Kamata³

et al. 2020

Preprint

View full text Add to dashboard Cite

Security patterns encompass security-related issues in secure software system development and operations that often appear in certain contexts. Since the late 1990s about 500 security patterns have been proposed. Although the technical components are well investigated, the direction, overall picture, and barriers to implementation are not. Here, a systematic literature review of 240 papers is used to devise a taxonomy for security pattern research. Our taxonomy and the survey results should improve communications among practitioners and researchers, standardize the terminology, and increase the effectiveness of security patterns.

show abstract

Modeling and Analyzing Security Patterns Using High Level Petri Nets

Abstract: -

Cited by 3 publications

References 9 publications

An Approach for Verification of Secure Access Control Using Security Pattern

An Approach for Verification of Secure Access Control Using Security Pattern

Pattern-Based Approach to Modelling and Verifying System Security

Systematic Literature Review of Security Pattern Research

Contact Info

Product

Resources

About