Model-based Security Engineering for Secure Systems Development

Konferenz: ARCS Workshop 2018 - 31th International Conference on Architecture of Computing Systems
09.04.2018 - 12.04.2018 in Braunschweig, Germany

Tagungsband: ARCS 2018

Seiten: 10Sprache: EnglischTyp: PDF

Persönliche VDE-Mitglieder erhalten auf diesen Artikel 10% Rabatt

Lunkeit, Armin (OpenLimit SignCubes GmbH, Berlin, Germany)
Pohl, Hartmut (softScheck GmbH, Sankt Augustin, Germany)

Security of software and systems is becoming more and more important in the context of the rapid rise of distributed communication systems and their use into the private life of each individual. The development of new software is also accompanied by an immense time and cost pressure. The aspects of IT-security are therefore often not considered within the software development process. The aim of this work is to contribute to the improvement of the integration of security engineering into software engineering. A model-based approach for determination of assets, security objectives, threats, and attacks is presented. The derivation of functional requirements for the software development process from these artefacts is explained.