Building Secure Applications Using Pattern-Based Design Fragments

Developing and operating a complex secure application with high assurance is difficult and requires experts. Security patterns and best practices have been proposed to assist architects in designing secure applications. However, these are usually written independently of the underlying platforms and...

Full description

Saved in:
Bibliographic Details
Published in2015 IEEE 34th Symposium on Reliable Distributed Systems Workshop (SRDSW) pp. 19 - 24
Main Authors Rimba, Paul, Liming Zhu, Xiwei Xu, Sun, Daniel
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.09.2015
Subjects
Australia
Best practices
Buildings
composition
operations
Permission
security
Smart meters
Stakeholders
verification
Online AccessGet full text

Cover

More Information
Summary:Developing and operating a complex secure application with high assurance is difficult and requires experts. Security patterns and best practices have been proposed to assist architects in designing secure applications. However, these are usually written independently of the underlying platforms and operating environment. This leads to a gap between patterns and the platforms, and does not directly support the design-level analysis and verification of systems to be built on those platforms. We propose an approach to incrementally build an application design using design fragments, which are specializations of patterns for target platforms. Design fragments can be composed and reused during design, and directly support design-level security analyses and operation level concerns. We apply this approach in a case study of the design and analysis of a smart electricity meter. We show how the approach can be used to iteratively address threats.
DOI:10.1109/SRDSW.2015.12