Engineering secure systems: Models, patterns and empirical validation - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Computers and Security Année : 2018

Engineering secure systems: Models, patterns and empirical validation

Résumé

Several development approaches have been proposed to handle the growing complexity of software system design. The most popular methods use models as the main artifacts to construct and maintain. The desired role of such models is to facilitate, systematize and standardize the construction of software-based systems. In our work, we propose a model-driven engineering (MDE) methodological approach associated with a pattern-based approach to support the development of secure software systems. We address the idea of using patterns to describe solutions for security as recurring security problems in specific design contexts and present a well-proven generic scheme for their solutions. The proposed approach is based on metamodeling and model transformation techniques to define patterns at different levels of abstraction and generate different representations according to the target domain concerns, respectively. Moreover, we describe an operational architecture for development tools to support the approach. Finally, an empirical evaluation of the proposed approach is presented through a practical application to a use case in the metrology domain with strong security requirements, which is followed by a description of a survey performed among domain experts to better understand their perceptions regarding our approach.
Fichier principal
Vignette du fichier
hamid_24828.pdf (4.12 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03507819 , version 1 (03-01-2022)

Identifiants

Citer

Brahim Hamid, Donatus Weber. Engineering secure systems: Models, patterns and empirical validation. Computers and Security, 2018, 77, pp.315-348. ⟨10.1016/j.cose.2018.03.016⟩. ⟨hal-03507819⟩
20 Consultations
51 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More