Security Compliance in Model-driven Development of Software Systems in Presence of Long-Term Evolution and Variants
-
- Taschenbuch ausgewählt
- eBook
-
Sprache:Englisch
Fr. 126.00
inkl. gesetzl. MwSt.,
Beschreibung
Produktdetails
Einband
Taschenbuch
Erscheinungsdatum
14.07.2022
Abbildungen
XXXVI, 476 p. 138 illus., 80 illus. in color.
Verlag
Springer Fachmedien Wiesbaden GmbHSeitenzahl
476
Maße (L/B/H)
21/14.8/2.8 cm
Gewicht
655 g
Auflage
1st ed. 2022
Sprache
Englisch
ISBN
978-3-658-37664-2
For ensuring a software system's security, it is vital to keep up with changing security precautions, attacks, and mitigations. Although model-based development enables addressing security already at design-time, design models are often inconsistent with the implementation or among themselves. An additional burden are variants of software systems. To ensure security in this context, we present an approach based on continuous automated change propagation, allowing security experts to specify security requirements on the most suitable system representation. We automatically check all system representations against these requirements and provide security-preserving refactorings for preserving security compliance. For both, we show the application to variant-rich software systems. To support legacy systems, we allow to reverse-engineer variability-aware UML models and semi-automatically map existing design models to the implementation. Besides evaluations of the individual contributions, we demonstrate the approach in two open-source case studies, the iTrust electronics health records system and the Eclipse Secure Storage.
Noch keine Bewertungen vorhanden
Verfassen Sie die erste Bewertung zu diesem Artikel
Helfen Sie anderen Kundinnen und Kunden durch Ihre Meinung.