A Formal Approach for Implementing Security Constraints in Security Patterns
Charu Gupta, Rakesh Kumar Singh, Amar Kumar Mohapatra · 2021
Security patterns are being used in software applications to mitigate attacks occurring due to software vulnerabilities. However, developer sometimes overlooks best practices while implementing the security pattern in the software application. In this paper, authors propose a formal approach to describe various security constraints using first order predicate logic. This will facilitate the detection of security vulnerabilities at the early stages of software development life cycle. The approach has been verified using Secure Factory Pattern. The effectiveness of the approach has been further validated using Library Management System as a case study. The proposed approach will help in detection of hidden vulnerabilities in software applications.