A Pattern-Based General Security Framework : An eBusiness Case Study - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

A Pattern-Based General Security Framework : An eBusiness Case Study

Résumé

Security and domain specific regulations are critical for any organization. Unfortunately, achieving these prerequisites in a socio-technical environment is a difficult task. For example, let us consider the aspect of computer security:~neither software developers nor regulatory authorities are security experts. Therefore, it is important that security experts' knowledge is captured and made available to software developers. Security patterns are a suitable prescription to capture experts' solutions to commonly recurring security problems. In this paper, we present the application of a general framework, based on security patterns, used to develop secure applications. It covers the entire process of solution development:~defining organizational security requirements using Secure Tropos, formalizing the pattern using SI*, implementing the pattern, integrating it into the final application, and monitoring the runtime. All these phases are discussed and illustrated with an eBusiness case study: the loan origination process.
Fichier non déposé

Dates et versions

hal-01437680 , version 1 (17-01-2017)

Identifiants

Citer

Azzedine Benameur, Serge Fenet, Ayda Saidane, Sinha Smriti Kumar. A Pattern-Based General Security Framework : An eBusiness Case Study. Proc. 11th IEEE Int. Conf. on High Performance Computing and Communications HPCC'09, Jun 2009, Seoul, South Korea. pp.339-346, ⟨10.1109/HPCC.2009.93⟩. ⟨hal-01437680⟩
100 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More