Security Engineering with Patterns

Schumacher, Markus

doi:10.1007/b11930

Cited by 139 publications

(73 citation statements)

References 53 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Several generalizations on this basis to describe software design patterns in general are proposed in literature. Adapting the definition of security patterns given in [18], we propose the following: Definition 1 (Security and Dependability Pattern). A security and dependability pattern describes a particular recurring security/and or dependability problem that arises in specific contexts and presents a well-proven generic scheme for its solution.…”

Section: Definitions and Conceptsmentioning

confidence: 99%

Model-Based Specification and Validation of Security and Dependability Patterns

Hamid

Percebois

2014

Foundations and Practice of Security

View full text Add to dashboard Cite

Abstract. The requirement for higher Security and Dependability (S&D) of systems is continuously increasing, even in domains traditionally not deeply involved in such issues. In our work, we propose a modeling environment for pattern-based secure and dependable embedded system development by design. Here we study a general scheme for representing security and dependability (S&D) design patterns whose intention specification can be defined using a set of local properties. We propose an approach that associates Model Driven Engineering (MDE) and formal validation to get a common representation to specify patterns for several domains. The contribution of this work is twofold. On the one hand, we use model-based techniques to capture a set of artifacts to specify patterns. On the other hand, we introduce a set of artifacts for the formal validation of these patterns in order to guarantee their correctness. As an illustration of the approach, we study the authorization pattern.

show abstract

Section: Definitions and Conceptsmentioning

confidence: 99%

Model-Based Specification and Validation of Security and Dependability Patterns

Hamid

Percebois

2014

Foundations and Practice of Security

View full text Add to dashboard Cite

show abstract

“…The need of an formalization of security patterns has been addressed by M. Schumacher [17] by providing an classification. However, his approach is not suitable to enable an automated application of security patterns.…”

Section: Security Patterns For Soa Securitymentioning

confidence: 99%

A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures

Menzel

Warschofsky

Meinel

2010

2010 IEEE International Conference on Web Services

View full text Add to dashboard Cite

Service-oriented Architectures support the provision, discovery, and usage of services in different application contexts. The Web Service specifications provide a technical foundation to implement this paradigm. Moreover, mechanisms are provided to face the new security challenges raised by SOA. To enable the seamless usage of services, security requirements can be expressed as security policies (e.g. WS-Policy and WSSecurityPolicy) that enable the negotiation of these requirements between clients and services.However, the codification of security policies is a difficult and error-prone task due to the complexity of the Web Service specifications. In this paper, we introduce our model-driven approach that facilitates the transformation of architecture models annotated with simple security intention to security policies. This transformation is driven by security configuration patterns that provide expert knowledge on Web Service security. Therefore, we will introduce a formalised pattern structure and a domain-specific language to specify these patterns.

show abstract

“…To help developers, security patterns can be used. "A security pattern describes a particular recurring security problem that arises in specific contexts and presents a well-proven generic scheme for its solution" [19]. In other words, security patterns document proven solutions to security related problems in such a way that are applicable by nonsecurity specialists.…”

Section: Fig 7 Esap Actor Partial Decompositionmentioning

confidence: 99%

Enhancing Secure Tropos to Effectively Deal with Security Requirements in the Development of Multiagent Systems

Mouratidis

Giorgini

2009

Safety and Security in Multiagent Systems

View full text Add to dashboard Cite

Abstract. The consideration of security requirements in the development of multi-agent systems is a very difficult task. However, only few approaches have been proposed that try to integrate security issues as internal part of the development process. Amongst them, secure Tropos has been proposed as a structured approach towards the consideration of security issues in the development of multiagent systems. In this paper we enhance secure Tropos by integrating to its stages: (i) a process for selecting amongst alternative architectural styles using as criteria the security requirements of the system; (ii) a pattern-based approach to transform security requirements to design, and (iii) a security attack scenarios approach to test the developed solution. The electronic single assessment process (eSAP) case study is used to illustrate our approach.

show abstract

Security Engineering with Patterns

Cited by 139 publications

References 53 publications

Model-Based Specification and Validation of Security and Dependability Patterns

Model-Based Specification and Validation of Security and Dependability Patterns

A Pattern-Driven Generation of Security Policies for Service-Oriented Architectures

Enhancing Secure Tropos to Effectively Deal with Security Requirements in the Development of Multiagent Systems

Contact Info

Product

Resources

About