.png){kind=icon}
返回
ASE: A comprehensive pattern-driven security methodology for distributed systems
.png){kind=icon}
PRE
AI
DOI：10.1016/j.csi.2015.02.011.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Incorporating security features is one of the most important and challenging tasks in designing distributed systems. Over the last decade, researchers and practitioners have come to recognize that the incorporation of security features should proceed by means of a structured, systematic approach, combining principles from both software and security engineering. Such systematic approaches, particularly those implying some sort of process aligned with the development life-cycle, are termed security methodologies. There area number of security methodologies in the literature, of which the most flexible and, according to a recent survey, most satisfactory from an industry-adoption viewpoint are methodologies that encapsulate their security solutions in some fashion, especially via the use of security patterns. While the literature does present several mature pattern-driven security methodologies with either a general or a highly specific system applicability, there are currently no (pattern-driven) security methodologies specifically designed for general distributed systems. Going further, there are also currently no methodologies with mixed specific applicability, e.g. for both general and peer-to-peer distributed systems. In this paper we aim to fill these gaps by presenting a comprehensive pattern-driven security methodology - arrived at by applying a previously devised approach to engineering security methodologies - specifically designed for general distributed systems, which is also capable of taking into account the specifics of peer-to-peer systems as needed. Our methodology takes the principle of encapsulation several steps further, by employing patterns not only for the incorporation of security features (via security solution frames), but also for the modeling of threats, and even as part of its process. We illustrate and evaluate the presented methodology in detail via a realistic example - the development of a distributed system for file sharing and collaborative editing. In both the presentation of the methodology and example our focus is on the early life-cycle phases (analysis and design). (C) 2015 Elsevier B.V. All rights reserved.
Keyword:
Secure software engineering
Security methodologies
Distributed systems security
Security patterns
Security solution frames
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
3.1
论文数:
2.3K
被引数:
2.0K
机构
引用论文
The practical application of a process for eliciting and designing security in web service systems
PREAI
分享收藏Secure Tropos framework for software product lines requirements engineering用于软件产品线需求工程的安全Tropos框架
OAAI
OAAI分享收藏分享收藏Systematics of basidiomycetous yeasts: a comparison of large subunit D1/D2 and internal transcribed spacer rDNA regions.担子菌酵母的系统学：大亚基D1/D2和内部转录间隔区rDNA区域的比较。.png)
IF0
PREAI
分享收藏
查看更多内容