Back to the drawing board bringing security constraints in an architecture-centric software development process

Stefanie Jasser; Katja Tuma; Riccardo Scandariato; Matthias Riebisch

doi:10.5220/0006659904380446

Back to the drawing board bringing security constraints in an architecture-centric software development process

Stefanie Jasser, Katja Tuma, Riccardo Scandariato, Matthias Riebisch

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

Abstract

Today, security is still poorly considered in early phases of software engineering. Architects and software engineers still lack knowledge about architectural security design as well as implementing it compliantly. However, a software system that is not designed for security or does not adhere to this design can hardly meet its security requirements. In this paper, we present an approach we are working on. The approach consists of two parts: Firstly, we improve the architecture’s security level through model transformation. Secondly, we derive rules and constraints from the secured architecture in order to check the implementation’s conformance. Through these activities we aim to support architects and software developers in building a secure software system. We plan to evaluate our approach in industrial case studies.

Original language	English
Title of host publication	ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy
Editors	Paolo Mori, Steven Furnell, Olivier Camp
Publisher	SciTePress
Pages	438-446
Number of pages	9
ISBN (Electronic)	9789897582820
DOIs	https://doi.org/10.5220/0006659904380446
Publication status	Published - 2018
Externally published	Yes
Event	4th International Conference on Information Systems Security and Privacy, ICISSP 2018 - Funchal, Madeira, Portugal Duration: 22 Jan 2018 → 24 Jan 2018

Publication series

Name	ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy
Volume	2018-January

Conference

Conference	4th International Conference on Information Systems Security and Privacy, ICISSP 2018
Country/Territory	Portugal
City	Funchal, Madeira
Period	22/01/18 → 24/01/18

Bibliographical note

Publisher Copyright:
Copyright © 2018 by SCITEPRESS – Science and Technology Publications, Lda. All rights reserved.

Copyright:
Copyright 2020 Elsevier B.V., All rights reserved.

Keywords

Architectural Decay
Architecture Compliance Checking
Architecture Conformance Checking
Architecture Erosion
Architecture Violations
Privacy by Design
Secure Software Architecture
Security by Design
Security Constraints
Software Architecture

Access to Document

10.5220/0006659904380446

Persistent URL (handle)

Persistent link

Cite this

Jasser, S., Tuma, K., Scandariato, R., & Riebisch, M. (2018). Back to the drawing board bringing security constraints in an architecture-centric software development process. In P. Mori, S. Furnell, & O. Camp (Eds.), ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy (pp. 438-446). (ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy; Vol. 2018-January). SciTePress. https://doi.org/10.5220/0006659904380446

Jasser, Stefanie ; Tuma, Katja ; Scandariato, Riccardo et al. / Back to the drawing board bringing security constraints in an architecture-centric software development process. ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy. editor / Paolo Mori ; Steven Furnell ; Olivier Camp. SciTePress, 2018. pp. 438-446 (ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy).

@inproceedings{5bd9ca798cc7466da91c9b7ba18b0931,

title = "Back to the drawing board bringing security constraints in an architecture-centric software development process",

abstract = "Today, security is still poorly considered in early phases of software engineering. Architects and software engineers still lack knowledge about architectural security design as well as implementing it compliantly. However, a software system that is not designed for security or does not adhere to this design can hardly meet its security requirements. In this paper, we present an approach we are working on. The approach consists of two parts: Firstly, we improve the architecture{\textquoteright}s security level through model transformation. Secondly, we derive rules and constraints from the secured architecture in order to check the implementation{\textquoteright}s conformance. Through these activities we aim to support architects and software developers in building a secure software system. We plan to evaluate our approach in industrial case studies.",

keywords = "Architectural Decay, Architecture Compliance Checking, Architecture Conformance Checking, Architecture Erosion, Architecture Violations, Privacy by Design, Secure Software Architecture, Security by Design, Security Constraints, Software Architecture",

author = "Stefanie Jasser and Katja Tuma and Riccardo Scandariato and Matthias Riebisch",

note = "Publisher Copyright: Copyright {\textcopyright} 2018 by SCITEPRESS – Science and Technology Publications, Lda. All rights reserved. Copyright: Copyright 2020 Elsevier B.V., All rights reserved.; 4th International Conference on Information Systems Security and Privacy, ICISSP 2018 ; Conference date: 22-01-2018 Through 24-01-2018",

year = "2018",

doi = "10.5220/0006659904380446",

language = "English",

series = "ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy",

publisher = "SciTePress",

pages = "438--446",

editor = "Paolo Mori and Steven Furnell and Olivier Camp",

booktitle = "ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy",

}

Jasser, S, Tuma, K, Scandariato, R & Riebisch, M 2018, Back to the drawing board bringing security constraints in an architecture-centric software development process. in P Mori, S Furnell & O Camp (eds), ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy. ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy, vol. 2018-January, SciTePress, pp. 438-446, 4th International Conference on Information Systems Security and Privacy, ICISSP 2018, Funchal, Madeira, Portugal, 22/01/18. https://doi.org/10.5220/0006659904380446

Back to the drawing board bringing security constraints in an architecture-centric software development process. / Jasser, Stefanie; Tuma, Katja; Scandariato, Riccardo et al.
ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy. ed. / Paolo Mori; Steven Furnell; Olivier Camp. SciTePress, 2018. p. 438-446 (ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy; Vol. 2018-January).

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Back to the drawing board bringing security constraints in an architecture-centric software development process

AU - Jasser, Stefanie

AU - Tuma, Katja

AU - Scandariato, Riccardo

AU - Riebisch, Matthias

PY - 2018

Y1 - 2018

N2 - Today, security is still poorly considered in early phases of software engineering. Architects and software engineers still lack knowledge about architectural security design as well as implementing it compliantly. However, a software system that is not designed for security or does not adhere to this design can hardly meet its security requirements. In this paper, we present an approach we are working on. The approach consists of two parts: Firstly, we improve the architecture’s security level through model transformation. Secondly, we derive rules and constraints from the secured architecture in order to check the implementation’s conformance. Through these activities we aim to support architects and software developers in building a secure software system. We plan to evaluate our approach in industrial case studies.

AB - Today, security is still poorly considered in early phases of software engineering. Architects and software engineers still lack knowledge about architectural security design as well as implementing it compliantly. However, a software system that is not designed for security or does not adhere to this design can hardly meet its security requirements. In this paper, we present an approach we are working on. The approach consists of two parts: Firstly, we improve the architecture’s security level through model transformation. Secondly, we derive rules and constraints from the secured architecture in order to check the implementation’s conformance. Through these activities we aim to support architects and software developers in building a secure software system. We plan to evaluate our approach in industrial case studies.

KW - Architectural Decay

KW - Architecture Compliance Checking

KW - Architecture Conformance Checking

KW - Architecture Erosion

KW - Architecture Violations

KW - Privacy by Design

KW - Secure Software Architecture

KW - Security by Design

KW - Security Constraints

KW - Software Architecture

UR - http://www.scopus.com/inward/record.url?scp=85052017951&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85052017951&partnerID=8YFLogxK

U2 - 10.5220/0006659904380446

DO - 10.5220/0006659904380446

M3 - Conference contribution

AN - SCOPUS:85052017951

T3 - ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy

SP - 438

EP - 446

BT - ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy

A2 - Mori, Paolo

A2 - Furnell, Steven

A2 - Camp, Olivier

PB - SciTePress

T2 - 4th International Conference on Information Systems Security and Privacy, ICISSP 2018

Y2 - 22 January 2018 through 24 January 2018

ER -

Jasser S, Tuma K, Scandariato R, Riebisch M. Back to the drawing board bringing security constraints in an architecture-centric software development process. In Mori P, Furnell S, Camp O, editors, ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy. SciTePress. 2018. p. 438-446. (ICISSP 2018 - Proceedings of the 4th International Conference on Information Systems Security and Privacy). doi: 10.5220/0006659904380446

Back to the drawing board bringing security constraints in an architecture-centric software development process

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Persistent URL (handle)

Other files and links

Fingerprint

Cite this