Eztending Model Driven Architecture with Software Security Assessment

摘要：

Security plays a crucial role in software systems. Existing research efforts have addressed the probleM of how to model the security aspect of software at a particular phase of software lifecycle. However, security is still not integrated in all the phases of software lifecycle. In this paper we introduce how classical MDA framework can be extended to consider the security aspect. Such extension offers early assessment and early validation of security requirement, which helps to discover security flaws early in the software development process and reduce the cost of removing flaws.

关键词： Software Security Assessment Model-driven Architecture

作者: Xucheng Tang Beijun Shen

作者单位: School of Software Shanghai Jiao Tong University 800 Dongchuan Road, Shanghai 200240, China

会议类型: 国际会议

会议名称: 2009 Third IEEE International Conference on Secure Integration and Reliability Improvement SSIRI 2009(第三届IEEE安全软件集成及可信性改进国际会议)

会议地点: 上海

会议语种:英文

页码: 436-441

在线出版日期: 2009-07-08（万方平台首次上网日期，不代表论文的发表时间）