An architectural framework for analyzing tradeoffs between software security and performance

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 6150 LNCS, Issue , 2010, Pages 1-18

  Cortellessa, Vittorio ^a   Trubiani, Catia ^a   Mostarda, Leonardo ^b   Dulay, Naranker ^b  

^a UNIVERSITY OF L'AQUILA   (Italy)

^b IMPERIAL COLLEGE LONDON   (United Kingdom)

Author keywords

GSPN; performance; security; tradeoff analysis; UML

Indexed keywords

APPLICATION MODELS; ARCHITECTURAL ANALYSIS; ARCHITECTURAL FRAMEWORKS; COMPOSABILITY; CRITICAL SYSTEMS; CULTURAL ASSETS; MODEL-BASED EVALUATION; NON-FUNCTIONAL; PERFORMANCE DEGRADATION; PERFORMANCE REQUIREMENTS; SECURITY AND PERFORMANCE; SECURITY MECHANISM; SECURITY SOLUTIONS; SOFTWARE ARCHITECTS; SOFTWARE PERFORMANCE; SOFTWARE SECURITY; SOFTWARE SYSTEMS; TRADE-OFF ANALYSIS; UML MODEL;

COMPUTER SOFTWARE; DEGRADATION; UNIFIED MODELING LANGUAGE;

SOFTWARE ARCHITECTURE;

EID: 77954631263     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-13556-9_1     Document Type: Conference Paper

References (22)

1. UML 2.0 Superstructure Specification, OMG document formal/05-07-04, Object Management Group (2005), http://www.omg.org/cgi-bin/doc?formal/05-07-04
2. UML Profile for MARTE beta 2, OMG document ptc/08-06-09 (2008), http://www.omgmarte.org/Documents/Specifications/08-06-09.pdf
3. Balsamo, S., Di Marco, A., Inverardi, P., Simeoni, M.: Model-based performance prediction in software development: A survey. IEEE TSE 30(5), 295-310
4. Blaze, M., Ioannidis, J., Keromytis, A.D.: Trust management for ipsec. ACM Transactions on Information and System Security 5(2), 95-118 (2002)
5. Cortellessa, V., Trubiani, C.: Towards a library of composable models to estimate the performance of security solutions. In: WOSP, pp. 145-156 (2008)
6. Cortellessa, V., Trubiani, C., Mostarda, L., Dulay, N.: An Architectural Framework for Analyzing Tradeoffs between Software Security and Performance - Extended results. Technical Report 001-2010, Dipartimento di Informatica - Università dell'Aquila (2010), http://www.di.univaq.it/cortelle/docs/001- 2010-report.pdf
7. European Commision 6th Framework Program. Cultural Heritage Space Identification System (CUSPIS), www.cuspis-project.info
8. France, R.B., Ray, I., Georg, G., Ghosh, S.: Aspect-oriented approach to early design modelling. IEE Proceedings - Software 151(4), 173-186 (2004)
9. Gupta, V., Gupta, S., Shantz, S.C., Stebila, D.: Performance analysis of elliptic curve cryptography for SSL, pp. 87-94 (2002)
10. Harbiterr, A., Menasce, D.A.: A methodology for analyzing the performance of authentication protocols. ACM TISSEC (2002)
11. Hirel, C., Sahner, R., Zang, X., Trivedi, K.: Reliability and performability modeling using sharpe 2000. In: Haverkort, B.R., Bohnenkamp, H.C., Smith, C.U. (eds.) TOOLS 2000. LNCS, vol. 1786, pp. 345-349. Springer, Heidelberg (2000)
12. Juric, M.B., Rozman, I., Brumen, B., Colnaric, M., Hericko, M.: Comparison of performance of web services, ws-security, rmi, and rmi-ssl. Journal of Systems and Software 79(5), 689-700 (2006)
13. Jurjens, J.: Secure Systems Development with UML (2004)
14. Kant, K., Iyer, R.K., Mohapatra, P.: Architectural impact of Secure Socket Layer on internet servers, pp. 7-14 (2000)
15. Marsan, M.A., Balbo, G., Conte, G., Donatelli, S., Franceschinis, G.: Modelling with Generalized Stochastic Petri Nets, 4th edn. (November 1994)
16. Menascé, D.A.: Security performance. IEEE Internet Computing 7(3), 84-87 (2003)
17. Mostarda, L., Dong, C., Dulay, N.: Place and Time Authentication of Cultural Assets. In: 2nd Joint ITRUST and PST Conferences on Privacy, Trust and Security, IFIPTM 2008 (2008)
18. Stallings, W.: Cryptography and network security: Principles and Practice, 4th edn. Prentice-Hall, Englewood Cliffs (2006)
19. Tai, A.T., Meyer, J.F., Avizienis, A.: Software Performability: From Concepts to Applications. Kluwer Academic Publishers, Boston (1996)
20. Tawhid, R., Petriu, D.C.: Towards automatic derivation of a product performance model from a UML software product line model. In: WOSP, pp. 91-102 (2008)
21. Trivedi, K.: Sharpe interface, user's manual, version 1.01. Technical report (1999), http://www.ee.duke.edu/~chirel/MANUAL/gui.doc
22. Woodside, C.M., Petriu, D.C., Petriu, D.B., Xu, J., Israr, T.A., Georg, G., France, R.B., Bieman, J.M., Houmb, S.H., Jürjens, J.: Performance analysis of security aspects by weaving scenarios extracted from UML models. Journal of Systems and Software 82(1), 56-74 (2009)