Context-Based Architectural Security Analysis
Emre Taşpolatoğlu, Robert Heinrich · 2016
It is a challenging task to achieve security for software-intensive systems and to preserve it as systems change. Security degrades a lot faster than other non-functional properties, as it depends not only on the software, but also on software's context deeply. This degradation arises drastically, when developers do not include such security-related context information in their designs and neglect corresponding change impacts. In this paper, we propose our approach to document explicit context information of software systems formally and integrate them into an architecture description language (ADL) for security analysis. We show how these architectural improvements can support maintaining security properties by foreseeing impacts of evolutionary changes and reacting accordingly.