Guiding the selection of security patterns based on security requirements and pattern classification - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

Guiding the selection of security patterns based on security requirements and pattern classification

Résumé

Security pattern-based system and software engineering (PBSE) approaches aim at building secure software and systems by capturing and reusing artifacts that encapsulate security expert's knowledge called security patterns. In this context, security patterns are selected by developers based on security requirements. On the other hand, security risk management is an iterative approach that consists of: (1) a risk assessment activity for identifying, analyzing and evaluating security risks and (2) a risk treatment activity to mitigate these risks which result in issuing security requirements. Hence, risk management and security PBSE can be used together. In this context, this paper aims at guiding the selection of security patterns in security PBSE based on security risk management results and pattern classification. For illustration purposes, we consider an example of a SCADA (Supervisory Control And Data Acquisition) system.
Fichier principal
Vignette du fichier
motii_16869.pdf (901.69 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01567086 , version 1 (21-07-2017)

Identifiants

  • HAL Id : hal-01567086 , version 1
  • OATAO : 16869

Citer

Anas Motii, Brahim Hamid, Agnes Lanusse, Jean-Michel Bruel. Guiding the selection of security patterns based on security requirements and pattern classification. 20th European Conference on Pattern Language of Programs (EuroPlop 2015), Jul 2015, Kloster Irsee, Germany. pp. 1-17. ⟨hal-01567086⟩
474 Consultations
451 Téléchargements

Partager

Gmail Facebook X LinkedIn More