Quantitative evaluation of systems with security patterns using a fuzzy approach

  • Authors:

  • Spyros T. Halkidis;Alexander Chatzigeorgiou;George Stephanides

  • Affiliations:

  • Department of Applied Informatics, University of Macedonia, Thessaloniki, Greece;Department of Applied Informatics, University of Macedonia, Thessaloniki, Greece;Department of Applied Informatics, University of Macedonia, Thessaloniki, Greece

  • Venue:
  • OTM'06 Proceedings of the 2006 international conference on On the Move to Meaningful Internet Systems: AWeSOMe, CAMS, COMINF, IS, KSinBIT, MIOS-CIAO, MONET - Volume Part I
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The importance of Software Security has been evident, since it has been shown that most attacks to software systems are based on vulnerabilities caused by software poorly designed and developed Furthermore, it has been discovered that it is desirable to embed security already at design phase Therefore, patterns aiming at enhancing the security of a software system, called security patterns, have been suggested The main target of this paper is to propose a mathematical model, based on fuzzy set theory, in order to quantify the security characteristics of systems using security patterns In order to achieve this we first determine experimentally to what extent specific security patterns enhance several security aspects of systems To determine this, we have developed two systems, one without security patterns and one containing them and have experimentally determined the level of the higher robustness to attacks of the latter The proposed mathematical model follows.