Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2014

Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices

Résumé

Security-by-design considers security throughout the whole development lifecycle, to detect and fix potential issues as early as possible. With this approach, the software architect should assess some security level of the software architecture, to predict whether the software under development will have security issues. Previous works proposed several metrics to measure the attack surface, the attackability, and the satisfaction of security requirements on the software architecture. However, proving the correlation between these metrics and security is far from trivial. To circumvent this difficulty, we propose new metrics rooted in CWE, NIST guidelines and security patterns. So, our four novel metrics measure the conformance of the software architecture to these acknowledged security-related recommendations. The usage of our metrics is evaluated with case studies.
Fichier principal
Vignette du fichier
MODELSWARD_2024___Monica.pdf (366.38 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04560293 , version 1 (26-04-2024)

Identifiants

Citer

Monica Buitrago, Isabelle Borne, Jérémy Buisson. Model-Based Assessment of Conformance to Acknowledged Security-Related Software Architecture Good Practices. 12th International Conference on Model-Based Software and Systems Engineering, Feb 2024, Rome, Italy. pp.117-124, ⟨10.5220/0012312400003645⟩. ⟨hal-04560293⟩
0 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More