Towards Precise Security Patterns

Serrano, Daniel; Maa, A.; Sotirious, Athanasios-Dimitrios

doi:10.1109/dexa.2008.36

Cited by 17 publications

(15 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Next steps are (i) to develop the API for other languages, (ii) to create a plugging for include these concepts in a Java IDE (currently we are working on a Eclipse plugging), and (iii) to integrate the use of the proposed API in a development process for secure applications. This latter work is part of PhD thesis presented in [17].…”

Section: Discussionmentioning

confidence: 98%

See 1 more Smart Citation

Development of Applications Based on Security Patterns

Serrano

Ruiz

Muñoz

et al. 2009

2009 Second International Conference on Dependability

Self Cite

View full text Add to dashboard Cite

Current approaches for software development fail in the integration of security aspects. Usually, this is because of the software complexity and the specific expertise needed for the integration of modern security solutions. In this paper we present the SERENITY Project which proposes a framework addressing this issue. SERENITY is based on the separation of the development of security solutions from the development of secure software supported by these security solutions. Both developments, security solutions and secure applications, are centered on the use of libraries of precise descriptions of reusable security solutions stored in the form of security patterns. This approach fits very well with new emerging scenarios such as ambient intelligence, ubiquitous computing, grids, etc. In this paper we present the development of a secure application based on these ideas, in order to do that, we introduce an Application Programming Interface (API) specially designed for use SERENITY advantages.

show abstract

Section: Discussionmentioning

confidence: 98%

“…A detailed description of the development of application based on these online repositories can be found at [17]. C. Run-time framework SERENITY also provides a run-time framework, called Serenity Run-time Framework (SRF).…”

Section: B Development-time Frameworkmentioning

confidence: 99%

Development of Applications Based on Security Patterns

Serrano

Ruiz

Muñoz

et al. 2009

2009 Second International Conference on Dependability

Self Cite

View full text Add to dashboard Cite

show abstract

“…In concept, our modeling framework is similar to the one proposed in [27]. Nevertheless they used a rigid structure (a pattern is defined as quadruplet) and consequently their approach is not usable to capture specific characteristics of S&D patterns for several domains.…”

Section: Related Workmentioning

confidence: 98%

“…Recently, [27] explains how pattern integration can be achieved by using a library of precisely described and formally verified S&D solutions.…”

Section: Related Workmentioning

confidence: 99%

Enforcing S&D Pattern Design in RCES with Modeling and Formal Approaches

Hamid

Gürgens

Jouvray

et al. 2011

Model Driven Engineering Languages and Systems

View full text Add to dashboard Cite

Abstract. The requirement for higher security and dependability of systems is continuously increasing even in domains not traditionally deeply involved in such issues. Yet, evolution of embedded systems towards devices connected via Internet, wireless communication or other interfaces requires a reconsideration of secure and trusted embedded systems engineering processes. In this paper, we propose an approach that associates model driven engineering (MDE) and formal validation to build security and dependability (S&D) patterns for trusted RCES applications. The contribution of this work is twofold. On the one hand, we use model-based techniques to capture a set of artifacts to encode S&D patterns. On the other hand, we introduce a set of artifacts for the formal validation of these patterns in order to guarantee their correctness. The formal validation in turn follows the the MDE process and thus links concrete validation results to the S&D requirements identified at higher levels of abstraction.

show abstract

“…Recently, [Serrano et al 2008] explained how pattern integration can be achieved by using a library of precisely described and formally verified solutions. In concept, our modeling framework is similar to the one proposed in [Serrano et al 2008].…”

Section: Related Workmentioning

confidence: 99%

A methodology for integration of patterns with validation purpose

Hamid

Percebois

Gouteux

2012

Proceedings of the 17th European Conference on Pattern Languages of Programs

View full text Add to dashboard Cite

Design patterns are now widely used as a meaning to store and retrieve valuable expert information in order to solve a given problem or provide a selected property. During the software development life cycle, software engineers choose and integrate patterns depending on the specifications. We are proposing a methodology for pattern integration with validation activities. The proposed solution highlights a set of artifacts and practices, based on widely accepted standards such as OCL and UML, a pattern modeling language and using SPEM for the process definition. While ensuring the correctness of the integration, our process is flexible enough to let the designer adapts the solution to his/her particular needs. To illustrate our process, we will apply it to the GoF Mediator pattern and an UML class diagram representing the application of an air traffic controller.

show abstract

Towards Precise Security Patterns

Cited by 17 publications

References 1 publication

Development of Applications Based on Security Patterns

Development of Applications Based on Security Patterns

Enforcing S&D Pattern Design in RCES with Modeling and Formal Approaches

A methodology for integration of patterns with validation purpose

Contact Info

Product

Resources

About