Trade-off Analysis of Misuse Case-based Secure Software Architectures: A Case Study
Joshua James Pauli, Dianxiang Xu · 2005
Abstract. Based on the threat-driven architectural design of secure information systems, this paper introduces an approach for the tradeoff analysis of secure software architectures in order to determine the effects of security requirements on the system. We use a case study on a payroll information system (PIS) to show the approach from misuse case identification through the architecture tradeoff analysis. In the case study, we discuss how to make tradeoff between security and availability with respect to the number of servers present. 1