Pattern-Based Confidentiality-Preserving Refinement

  • Authors:
  • Holger Schmidt

  • Affiliations:
  • Faculty of Engineering, Department of Computer Science and Applied Cognitive Science, Workgroup Software Engineering, University Duisburg-Essen, Germany

  • Venue:
  • ESSoS '09 Proceedings of the 1st International Symposium on Engineering Secure Software and Systems
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present an approach to security requirements engineering, which makes use of special kinds of problem frames that serve to structure, characterize, analyze, and solve software development problems in the area of software and system security. In this paper, we focus on confidentiality problems. We enhance previously published work by formal behavioral frame descriptions, which enable software engineers to unambiguously specify security requirements. Consequently, software engineers can prove that the envisaged solutions provide functional correctness and that the solutions fulfill the specified security requirements.