TESEM: A Tool for Verifying Security Design Pattern Applications by Model Testing

2015 ◽  
Author(s):  
Takanori Kobashi ◽  
Masatoshi Yoshizawa ◽  
Hironori Washizaki ◽  
Yoshiaki Fukazawa ◽  
Nobukazu Yoshioka ◽  
...  
Keyword(s):  
Design Pattern ◽  
Model Testing ◽  
Security Design

Validating Security Design Patterns Application Using Model Testing

2013 ◽  
Author(s):  
Takanori Kobashi ◽  
Nobukazu Yoshioka ◽  
Takao Okubo ◽  
Haruhiko Kaiya ◽  
Hironori Washizaki ◽  
...  
Keyword(s):  
Design Patterns ◽  
Model Testing ◽  
Security Design

scholarly journals Security Design Pattern for Login System through Authentication using Modified Sha-384 Algorithm

2021 ◽  
Vol 10 (8) ◽  
pp. 68-73
Author(s):  
Yogini C. Kulkarni ◽  
S.D. Joshi
Keyword(s):  
Execution Time ◽  
Design Pattern ◽  
Security Design ◽  
Brute Force ◽  
Registration Form ◽  
Rainbow Table ◽  
Cain And Abel ◽  
Generic Attacks ◽  
Modified Algorithm

The research has been carried out to develop secure login system by authenticating the login using modified SHA-384 algorithm. It derives 896-bit hash value for the password entered by the user in the user registration form and saves the credentials entered by the user in system’s database. Results obtained are evaluated by resolving the general attacks confirmed that the modified SHA-384 algorithm was more secured compared to the original SHA-384 algorithm as it was not broken using generic attacks such as brute force, rainbow table and other cracking tools available online such as Cain and Abel. The performance of the modified algorithm was measured with only 2 ms additional execution time from SHA-384.

scholarly journals Security Modeling for Web Based Visitor‘s Login System for Pursuance of Security Design Pattern

2019 ◽  
Vol 9 (1) ◽  
pp. 982-991
Keyword(s):  
Software Development ◽  
Design Pattern ◽  
Early Stage ◽  
Quality Parameters ◽  
Security Requirements ◽  
Design Parameters ◽  
Design Decision ◽  
Security Design ◽  
Final Design ◽  
Use Of Internet

In recent years because of the widespread use of internet and other communication media security occurrences have broken all the barricades. System gets attacked by malicious attackers and various cyber criminalities. Every system should be built by taking security as a main priority while building a system so as to make it reliable, safety and also it should be enhanced with other quality parameters. Hence since beginning at every phase of software development till the implementation of the software, security aspect is needed to take into consideration before making the final design decision to avoid the expenses which may incur while recovering of the system after the damage. For attainment of this, it is must to integrate the security at each phase of the software development. The software developers insists on incorporating the software safeguards at the design phase which may wind up in identifying the architecture restrictions related with the security which in fact may not be necessary. To reduce this problem, this paper intends a structure for security development activities. These activities consist of security requirements identification and threats analysis which are to be converted into design decisions to lessen the risks to identified important assets. The recognized design parameters are then manually prioritized using VOSREP and CRAMM and accordingly Security design pattern is to be developed to incorporate security in the software. By manually calculating values of assets and prioritizing will help to identify the security requirements at the early stage of the software development life cycle. Accordingly the decisions for developing the security design pattern are to be taken for building the software system

Validating Security Design Pattern Applications by Testing Design Models

2014 ◽  
Vol 5 (4) ◽  
pp. 1-30 ◽  
Author(s):  
Takanori Kobashi ◽  
Nobukazu Yoshioka ◽  
Haruhiko Kaiya ◽  
Hironori Washizaki ◽  
Takano Okubo ◽  
...  
Keyword(s):  
Development Process ◽  
Early Stage ◽  
Model Testing ◽  
Security Requirements ◽  
Target System ◽  
Security Design ◽  
Software Developers ◽  
Security Patterns ◽  
Stage Of Development ◽  
Testing Design

Software developers are not necessarily security experts, confirming potential threats and vulnerabilities at an early stage of the development process (e.g., in the requirement- and design-phase) is insufficient. Additionally, even if designed software considers security at an early stage, whether the software really satisfies the security requirements must be confirmed. To realize secure design, this work proposes an application to validate security patterns using model testing. Its method provides extended security patterns, which include requirement- and design-level patterns as well as a new model testing process using these patterns. After a developer specifies threats and vulnerabilities in the target system during an early stage of development, this method can validate whether the security patterns are properly applied and assess if these vulnerabilities are resolved.

An Exploratory Study of the Security Design Pattern Landscape and their Classification

2016 ◽  
Vol 7 (3) ◽  
pp. 26-43 ◽  
Author(s):  
Poonam Ponde ◽  
Shailaja Shirwaikar
Keyword(s):  
Exploratory Study ◽  
Design Pattern ◽  
Design Patterns ◽  
Future Research ◽  
Security Design ◽  
Problem Context ◽  
Classification Schemes ◽  
Secure Systems ◽  
Security Issues ◽  
Future Research Directions

Security is a critical part of information systems and must be integrated into every aspect of the system. It requires a lot of expertise to design and implement secure systems due to the broad coverage of security issues and threats. A good system design is based on sound software engineering principles which leverages proven best practices in the form of standard guidelines and design patterns. A design pattern represents a reusable solution to a recurring problem in a specific context. The current security design pattern landscape contains several patterns, pattern catalogs and pattern classification schemes. To apply appropriate patterns for a specific problem context, a deeper understanding of this domain is essential. A survey of patterns and their classification schemes will aid in understanding pattern coverage and identifying gaps. In this paper, the authors have presented a detailed exploratory study of the security design pattern landscape. Based on their study, the authors have identified shortcomings and presented future research directions.

ANALYZING AND IMPROVING WEB APPLICATION QUALITY USING DESIGN PATTERNS

2012 ◽  
Vol 2 (2) ◽  
pp. 112-116
Author(s):  
Shikha Bhatia ◽  
Mr. Harshpreet Singh
Keyword(s):  
Web Application ◽  
Design Pattern ◽  
Design Patterns ◽  
Web Applications ◽  
Past Research ◽  
Software Systems ◽  
Interactive Software ◽  
Web Based ◽  
Software Application ◽  
Execution Speed

With the mounting demand of web applications, a number of issues allied to its quality have came in existence. In the meadow of web applications, it is very thorny to develop high quality web applications. A design pattern is a general repeatable solution to a generally stirring problem in software design. It should be noted that design pattern is not a finished product that can be directly transformed into source code. Rather design pattern is a depiction or template that describes how to find solution of a problem that can be used in many different situations. Past research has shown that design patterns greatly improved the execution speed of a software application. Design pattern are classified as creational design patterns, structural design pattern, behavioral design pattern, etc. MVC design pattern is very productive for architecting interactive software systems and web applications. This design pattern is partition-independent, because it is expressed in terms of an interactive application running in a single address space. We will design and analyze an algorithm by using MVC approach to improve the performance of web based application. The objective of our study will be to reduce one of the major object oriented features i.e. coupling between model and view segments of web based application. The implementation for the same will be done in by using .NET framework.

Sign in / Sign up

Export Citation Format

Share Document