Towards Developing Secure Software Using Problem-Oriented Security Patterns

Security patterns encompass security-related issues in secure software system development and operations that often appear in certain contexts. Since the late 1990s about 500 security patterns have been proposed. Although the technical components are well investigated, the direction, overall picture, and barriers to implementation are not. Here, a systematic literature review of 240 papers is used to devise a taxonomy for security pattern research. Our taxonomy and the survey results should improve communications among practitioners and researchers, standardize the terminology, and increase the effectiveness of security patterns.

Download Full-text

Security patterns modeling and formalization for pattern-based development of secure software systems

Innovations in Systems and Software Engineering ◽

10.1007/s11334-015-0259-1 ◽

2015 ◽

Vol 12 (2) ◽

pp. 109-140 ◽

Cited By ~ 10

Author(s):

B. Hamid ◽

S. Gürgens ◽

A. Fuchs

Keyword(s):

Software Systems ◽

Security Patterns ◽

Secure Software

Download Full-text

Development of IoT Health Monitor System using Security Patterns

International Journal of Engineering and Advanced Technology - Regular Issue ◽

10.35940/ijeat.c4679.029320 ◽

2020 ◽

Vol 9 (3) ◽

pp. 1573-1580

Keyword(s):

Health Care ◽

Network Connectivity ◽

Sensitive Data ◽

Security Patterns ◽

Software Application ◽

Software Vulnerabilities ◽

Secure Software ◽

Health Care Applications ◽

Iot Devices ◽

Health Monitor

Context: The most important non-functional requirement of the software application is the security. Developing Secure Software is a challenging Process. Software vulnerabilities and defects may disclose by developers, users, hackers due to Software-intensive systems get connected more and more in every day’s lives. A better way to develop secure software is, enhance security processes in all the phases in SDLC. To enhance security in SDLC process required lots of mechanisms and systematic measures to assess the security during the development process. Objective: In this paper, we propose a method “Security aware-Software Development Life Cycle (Sa-SDLC) using Security Patterns”. We also measure our security efforts in SDLC. This method fills the insecurity gaps from root level to top level in Granular style approach. Our method is suggestible for security critical applications such as Medical, Finance, Legacy and Communication (Messaging like email) Systems. Results: we successfully implemented our approach on remote health monitor since IoT devices are convenient in everyday life, these devices are using in home, environment, healthcare due to its feasible networking, storage and process features etc. In IoT health care applications, security of the sensitive data is paramount since humans are part of the IoT platform. IoTs heterogeneous network connectivity and expected growth, opens many new threats and attacks which impacts on life of a patient. Conclusion: Hence, our proposed methodology is implemented on Security Essential IoT based health care application and measures shows our method is improved software security

Download Full-text

Designing Secure Software by Testing Application of Security Patterns

Exploring Security in Software Architecture and Design - Advances in Information Security, Privacy, and Ethics ◽

10.4018/978-1-5225-6313-6.ch006 ◽

2019 ◽

pp. 136-169 ◽

Cited By ~ 1

Author(s):

Takanori Kobashi ◽

Hironori Washizaki ◽

Nobukazu Yoshioka ◽

Haruhiko Kaiya ◽

Takao Okubo ◽

...

Keyword(s):

Early Stage ◽

Model Testing ◽

Security Requirements ◽

Target System ◽

Software Systems ◽

Design Phase ◽

Security Patterns ◽

Stage Of Development ◽

Secure Software ◽

Design Software

Simply confirming potential threats and vulnerabilities in an early stage of the development process (e.g., the requirement or design phase) is insufficient because software developers are not necessarily security experts. Additionally, even if the software design considers security at an early stage, whether the software actually satisfies the security requirements must be confirmed. To realize secure design, the authors propose an application to design software systems with verification of security patterns using model testing. The method provides extended security patterns, which include requirement- and design-level patterns as well as a new designing and model testing process that uses these patterns. Once developers specify threats and vulnerabilities in the target system in an early stage of development, the method can verify whether the security patterns are properly applied and assess if the vulnerabilities are resolved.

Download Full-text

A Methodology to Develop Secure Systems Using Patterns

Integrating Security and Software Engineering ◽

10.4018/978-1-59904-147-6.ch005 ◽

2007 ◽

pp. 107-126 ◽

Cited By ~ 44

Author(s):

E. B. Fernandez ◽

M. M. Larrondo-Petrie ◽

T. Sorgente ◽

M. Vanhilst

Keyword(s):

Main Idea ◽

Current Status ◽

Security Patterns ◽

Secure Systems ◽

System A ◽

Secure Software ◽

Software Lifecycle

We are developing a methodology to build secure software for complex applications and its related support. This methodology considers the whole software lifecycle, uses security patterns, and is applied at all the architectural levels of the system. A main idea is that security principles should be applied at every stage and that each stage can be tested for compliance with security principles. Patterns help apply security principles. This chapter presents the current status of our work.

Download Full-text

A Methodology to Develop Secure Systems Using Patterns

Information Security and Ethics ◽

10.4018/978-1-59904-937-3.ch050 ◽

2008 ◽

pp. 654-670 ◽

Cited By ~ 2

Author(s):

E. B. Fernandez ◽

M. M. Larrondo-Petrie

Keyword(s):

Main Idea ◽

Current Status ◽

Security Patterns ◽

Secure Systems ◽

System A ◽

Secure Software ◽

Software Lifecycle

We are developing a methodology to build secure software for complex applications and its related support. This methodology considers the whole software lifecycle, uses security patterns, and is applied at all the architectural levels of the system. A main idea is that security principles should be applied at every stage and that each stage can be tested for compliance with security principles. Patterns help apply security principles. This chapter presents the current status of our work.

Download Full-text

Systematic Literature Review of Security Pattern Research

Information ◽

10.3390/info12010036 ◽

2021 ◽

Vol 12 (1) ◽

pp. 36

Author(s):

Hironori Washizaki ◽

Tian Xia ◽

Natsumi Kamata ◽

Yoshiaki Fukazawa ◽

Hideyuki Kanuka ◽

...

Keyword(s):

Literature Review ◽

Systematic Literature Review ◽

System Development ◽

Software System ◽

Security Patterns ◽

Secure Software ◽

Security Pattern ◽

Survey Results ◽

Barriers To Implementation

Security patterns encompass security-related issues in secure software system development and operations that often appear in certain contexts. Since the late 1990s, about 500 security patterns have been proposed. Although the technical components are well investigated, the direction, overall picture, and barriers to implementation are not. Here, a systematic literature review of 240 papers is used to devise a taxonomy for security pattern research. Our taxonomy and the survey results should improve communications among practitioners and researchers, standardize the terminology, and increase the effectiveness of security patterns.

Download Full-text