Model-Based Secure Software Development with Modularity, Reusability: A Model-Driven Security Approach

Phu Hong Nguyen

ISBN 10: 3659893889 / ISBN 13: 9783659893889

Editore: Lap Lambert Academic Publishing, 2016

Riguardo questo articolo

220 pages. 8.66x5.98x0.83 inches. In Stock.

Codice articolo 3659893889

Dati bibliografici

• Titolo: Model-Based Secure Software Development with Modularity, Reusability: A Model-Driven Security Approach
• Editore: Lap Lambert Academic Publishing
• Data di pubblicazione: 2016
• Lingua: Inglese
• ISBN 10: 3659893889
• ISBN 13: 9783659893889
• Rilegatura: Paperback
• Condizione: Brand New

Descrizione articolo

Riassunto

Software has become ubiquitous and essential in our daily lives. The security of software systems is so important that must be ensured by building better and more secure software first. But software systems are becoming much more complex that make the software security engineering task very challenging. Model-Driven Security (MDS) promotes the notion of security by design and the use of models for engineering software systems at a high-level of abstraction and productivity. This book first reveals and analyses the current state of the art of MDS research. Then, it describes a full MDS framework focusing on modularity and reusability (called MDS-MoRe), which could be the basis for a complete MDS development lifecycle of secure systems. More precisely, MDS-MoRe is composed of a modular approach to deal with a specific but complex security concern, i.e. delegation in access control management. In fact, modularity enables adaptive system and security policy to coevolve at runtime. On the other hand, MDS-MoRe presents another approach promoting not only modularity but also reusability based on a System of Security design Patterns for addressing multiple security concerns systematically.

L'autore

Phu H Nguyen is currently a software engineering researcher at the Simula Research Laboratory, Norway. Before joining Simula, he completed his PhD study at the Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg. Most of his publications so far are about model-based engineering for secure systems development