Scipediacontent: Scipediacontent moved page Draft Content 245538997 to Kuz et al 2016a

2021-01-28T17:40:51Z

Scipediacontent moved page Draft Content 245538997 to Kuz et al 2016a

Scipediacontent: Created page with " == Abstract == Building secure applications requires significant expertise. Secure platforms and security patterns have been proposed to alleviate this problem. However, cor..."

2021-01-28T17:40:48Z

Created page with " == Abstract == Building secure applications requires significant expertise. Secure platforms and security patterns have been proposed to alleviate this problem. However, cor..."

New page

== Abstract ==

Building secure applications requires significant expertise. Secure platforms and security patterns have been proposed to alleviate this problem. However, correctly applying patterns to use platform features is still highly expertise-dependent. Patterns are informal and there is a gap between them and platform features. We propose the concept of reusable verified design fragments, which package security patterns and platform features and are verified to provide assurance about their security properties. Design fragments can be composed through four primitive tactics. The verification of the composed design against desired security properties is presented in an assurance case. We demonstrate our approach by securing a Continuous Deployment pipeline and show that the tactics are sufficient to compose design fragments into a secure system. Finally, we formally define composition tactics, which are intended to support the development of systems that are secure by construction.

== Original document ==

The different versions of the original document can be found in:

* [https://researchcommons.waikato.ac.nz/bitstream/10289/9881/2/EDCC%202015%20paper.pdf https://researchcommons.waikato.ac.nz/bitstream/10289/9881/2/EDCC%202015%20paper.pdf]

* [http://xplorestaging.ieee.org/ielx7/7371542/7371940/07371969.pdf?arnumber=7371969 http://xplorestaging.ieee.org/ielx7/7371542/7371940/07371969.pdf?arnumber=7371969],
: [http://dx.doi.org/10.1109/edcc.2015.12 http://dx.doi.org/10.1109/edcc.2015.12]

* [https://researchcommons.waikato.ac.nz/handle/10289/9881 https://researchcommons.waikato.ac.nz/handle/10289/9881],
: [https://publications.csiro.au/rpr/pub?pid=nicta:8861 https://publications.csiro.au/rpr/pub?pid=nicta:8861],
: [http://ts.data61.csiro.au/publications/nictaabstracts/Rimba_ZBKR_15.abstract.pml http://ts.data61.csiro.au/publications/nictaabstracts/Rimba_ZBKR_15.abstract.pml],
: [https://dblp.uni-trier.de/db/conf/edcc/edcc2015.html#RimbaZBKR15 https://dblp.uni-trier.de/db/conf/edcc/edcc2015.html#RimbaZBKR15],
: [https://www.computer.org/csdl/proceedings/edcc/2015/9289/00/9289a213.pdf https://www.computer.org/csdl/proceedings/edcc/2015/9289/00/9289a213.pdf],
: [https://academic.microsoft.com/#/detail/757034641 https://academic.microsoft.com/#/detail/757034641]

← Older revision	Revision as of 17:40, 28 January 2021
(No difference)

Kuz et al 2016a - Revision history

Scipediacontent: Scipediacontent moved page Draft Content 245538997 to Kuz et al 2016a

Scipediacontent: Created page with " == Abstract == Building secure applications requires significant expertise. Secure platforms and security patterns have been proposed to alleviate this problem. However, cor..."