SecuRe -- An Approach to Recommending Security Design Patterns

arXiv (Cornell University)

Abstract

Security is an important quality of software systems, but there is a huge lack of security experts. To overcome this gap, we aim to make security design knowledge reusable for architects by proposing the SecuRe recommendation approach to secure software design. It lifts design patterns and knowledge engineering concepts to security-related design recommendations for software architectures. This paper presents the central concepts of this approach, the overall recommendation process, and the first results from an initial case study.

Authors 3

1. Alex R. Sabau Aachen Research Group Software Construction

   RWTH Aachen University

   Affiliation as printed

   Research Group Software Construction RWTH Aachen University Aachen , Germany

2. Dominik Lammers Aachen

   RWTH Aachen University

   Affiliation as printed

   RWTH Aachen University Aachen , Germany

3. Horst Lichter Aachen Research Group Software Construction

   RWTH Aachen University

   Affiliation as printed

   Research Group Software Construction RWTH Aachen University Aachen , Germany