An aspect-oriented methodology for designing secure applications

Georg, Geri and Ray, Indrakshi and Anastasakis, Kyriakos and Bordbar, Behzad and Toahchoodee, Manachai and Houmb, Siv Hilde (2009) An aspect-oriented methodology for designing secure applications. Information and Software Technology, 50 (5). pp. 846-864. ISSN 0950-5849 (In Press)

PDF
Restricted to UT campus only: Request a copy
2309Kb

Abstract:	We propose a methodology, based on aspect-oriented modeling (AOM), for incorporating security mechanisms in an application. The functionality of the application is described using the primary model and the attacks are specified using aspects. The attack aspect is composed with the primary model to obtain the misuse model. The misuse model describes how much the application can be compromised. If the results are unacceptable, then some security mechanism must be incorporated into the application. The security mechanism, modeled as security aspect, is composed with the primary model to obtain the security-treated model. The security-treated model is analyzed to give assurance that it is resilient to the attack.
Item Type:	Article
Copyright:	© 2009 Elsevier
Faculty:	Electrical Engineering, Mathematics and Computer Science (EEMCS)
Research Group:	Information Systems (IS)
Link to this item:	http://purl.utwente.nl/publications/62502
Official URL:	http://dx.doi.org/10.1016/j.infsof.2008.05.004
Export this item as:	BibTeX EndNote HTML Citation Reference Manager

Show download statistics for this publication

Repository Staff Only: item control page

Metis ID: 252085