From security patterns to implementation using petri nets

  • Authors:
  • Viktor Horvath;Till Dörges

  • Affiliations:
  • University of Hamburg, Hamburg, Germany;University of Hamburg, Hamburg, Germany

  • Venue:
  • Proceedings of the fourth international workshop on Software engineering for secure systems
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security Patterns - the adaption of Design Patterns by Gamma et al. to security - have not quite met the expectations since Yoder and Barcalow pioneered the field. The two main reasons for this are the lack of formalisation and the fact that security often permeates all parts of a software, which is hard to encapsulate in a single pattern. This paper investigates and presents our method of using Petri nets to first model security patterns on an abstract level. Gradual and intuitive refinement of the Petri nets then permits the creation of a running Petri net implementation - very much in the sense of model driven software engineering (MDSE) and model driven security (MDS). The Petri nets are modelled and executed using Renew - both IDE and virtual machine.