Building Secure Systems using Model-Based Engineering and Architectural Models
Joergen Hansson, Peter H. Feiler, John Morley · 2008
A system designer faces several challenges when specifying security for distributed computing environments or migrating systems to a new execution platform. Business stakeholders impose constraints due to cost, timeto-market requirements, productivity impact, customer satisfaction concerns, and the like. And users exercise power at the desktop over computing resources and data availability. So, a system designer needs to understand requirements regarding protected resources (e.g., data), confidentiality, and integrity. And, a designer needs to predict the effect that security measures will have on other runtime quality attributes such as resource consumption, availability, and real-time performance. After all, the resource costs associated with security can easily overload a system. Security processing can increase usage of processing power, bandwidth, battery (in embedded systems), and other resources. Despite that, security is often studied only in isolation and late in the process. However, using model-based engineering (MBE) tools, the Carnegie Mellon ® software