Security Engineering with Patterns - Origins, Theoretical Model, and New Application

For quite some time, in systems and software design, security only came as a second thought or even as a nice-to-have add-on. However, since the breakthrough of the Internet as a virtual backbone for electronic commerce and similar applications, security is now recognized as a fundamental requirement.
This book presents a systematic security improvement approach based on the pattern paradigm. The author first clarifies the key concepts of security patterns, defines their semantics and syntax, demonstrates how they can be used, and then compares his model with other security approaches. Based on the author's model and best practice in security patterns, security novices are now in a position to understand how security experts solve problems and can basically act like them by using the patterns available as building blocks for their designs.

Sommario

1. Introduction.- 2. Patterns in Software Development.- 3. Ontologies.- 4. The Human Factor.- 5. Classifying Security Improvement Artifacts.- 6. Toward a Security Core Ontology.- 7. Foundations of Security Patterns.- 8. A Theoretical Model for Security Patterns.- 9. New Applications of Security Patterns.- 10. Summary and Outlook.- A. Sources for Mining Security Patterns.- B. Example Security Patterns and Annotations.- C. Ontology Development.- D. F-Logic Primer.- E. Gaining Security Expertise.

Dettagli sul prodotto

• Autori: Markus Schumacher
• Editore: Springer, Berlin
• Lingue: Inglese
• Formato: Tascabile
• Pubblicazione: 14.08.2003
• EAN: 9783540407317
• ISBN: 978-3-540-40731-7
• Pagine: 210
• Peso: 346 g
• Illustrazioni: XIV, 210 p.
• Serie: Lecture Notes in Computer Science
• Categorie: Scienze naturali, medicina, informatica, tecnica > Informatica, EDP > Informatica; C, Interdisziplinäre Studien, Software Engineering, Wirtschaftsmathematik und -informatik, IT-Management, Betriebssysteme, Netzwerk-Hardware, computer science, Science, Humanities and Social Sciences, multidisciplinary, Humanities and Social Sciences, Computers and Society, Management of Computing and Information Systems, Interdisciplinary studies, IT Operations, Computer Communication Networks, Operating systems, Maintenance & repairs, information architecture, Ethical & social aspects of IT, Computers and civilization, Management information systems, Computer communication systems, Operating systems (Computers), Network hardware