Evaluating security properties of architectures in unpredictable environments: A case for cloud

Proceedings - 9th Working IEEE/IFIP Conference on Software Architecture, WICSA 2011

Volumn , Issue , 2011, Pages 127-136

  Faniyi, Funmilade ^a   Bahsoon, Rami ^a   Evans, Andy ^b   Kazman, Rick ^c  

^a UNIVERSITY OF BIRMINGHAM   (United Kingdom)

^b Xactium Limited   (United Kingdom)

^c CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

ATAM; Cloud architectures; Dynamic architectures; Implied Scenario; Security

Indexed keywords

ARCHITECTURAL TRADE-OFF ANALYSIS; ATAM; DYNAMIC ARCHITECTURES; IMPLIED SCENARIO; INDUSTRIAL CASE STUDY; QUALITY ATTRIBUTES; SCENARIO TECHNIQUE; SECURITY; SECURITY PROPERTIES; SECURITY TESTING; SERVICE-BASED SYSTEMS; SOFTWARE-AS-A-SERVICE; TRADE-OFF POINT;

INDUSTRIAL APPLICATIONS; RISK PERCEPTION;

SOFTWARE ARCHITECTURE;

EID: 80052003994     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WICSA.2011.25     Document Type: Conference Paper

References (25)

1. M. Mowbray and S. Pearson, "A client-based privacy manager for cloud computing," in COMSWARE '09: Proceedings of the Fourth International ICST Conference on COMmunication System softWAre and middlewaRE. New York, NY, USA: ACM, 2009, pp. 1-8.
2. Amazon Web Services, "Creating HIPAA-Compliant Medical Data Applications with Amazon Web Services," Amazon Web Services, Tech. Rep., April 2009.
3. P. Mell and T. Grance, "The NIST Definition of Cloud Computing," NIST, Information Technology Laboratory, Tech. Rep., 2009.
4. R. Kazman, M. Klein, M. Barbacci, T. Longstaff, H. Lipson, and J. Carriere, "The architecture tradeoff analysis method," in Proceedings of the Fourth IEEE International Conference on Engineering of Complex Computer Systems (ICECCS). Monterey, CA: IEEE Computer Society, 1998, pp. 68-78.
5. S. Al-Azzani and R. Bahsoon, "Using implied scenarios in security testing," in SESS '10: Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure Systems. New York, NY, USA: ACM, 2010, pp. 15-21.
6. M. A. Babar and I. Gorton, "Comparison of scenario-based software architecture evaluation methods," in APSEC '04: Proceedings of the 11th Asia-Pacific Software Engineering Conference. Washington, DC, USA: IEEE Computer Society, 2004, pp. 600-607. (Pubitemid 40700564)
7. R. Kazman, M. Klein, and P. Clements, "ATAM: Method for Architecture Evaluation," Carnegie Mellon University, Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213, Tech. Rep., August 2000.
8. R. Kazman, S. J. Carrière, and S. G. Woods, "Toward a discipline of scenario-based architectural engineering," Ann. Softw. Eng., vol. 9, no. 1-4, pp. 5-33, 2000.
9. S. Uchitel, J. Kramer, and J. Magee, "Detecting implied scenarios in message sequence chart specifications," in ESEC/FSE-9: Proceedings of the 8th European software engineering conference held jointly with 9th ACM SIGSOFT international symposium on Foundations of software engineering. New York, NY, USA: ACM, 2001, pp. 74-82. (Pubitemid 35466912)
10. S. Uchitel, R. Chatley, J. Kramer, and J. Magee, "Ltsa-msc: tool support for behaviour model elaboration using implied scenarios," in TACAS'03: Proceedings of the 9th international conference on Tools and algorithms for the construction and analysis of systems. Berlin, Heidelberg: Springer-Verlag, 2003, pp. 597-601. (Pubitemid 137638659)
11. S. Al-Azzani and R. Bahsoon, "Semi-automated detection of architectural threats for security testing," in ESEC/FSE Doctoral Symposium '09: Proceedings of the doctoral symposium for ESEC/FSE on Doctoral symposium. New York, NY, USA: ACM, 2009, pp. 25-26.
12. A. Raza, H. Abbas, L. Yngstrom, and A. Hemani, "Security characterization for evaluation of software architectures using atam," in Information and Communication Technologies, 2009. ICICT '09. International Conference on, aug. 2009, pp. 241-246.
13. E. Vila and P. Borovska, "Data protection utilizing trusted platform module," in CompSysTech '08: Proceedings of the 9th International Conference on Computer Systems and Technologies and Workshop for PhD Students in Computing. New York, NY, USA: ACM, 2008, pp. V.13-1.
14. A. Shamir, "How to share a secret," Commun. ACM, vol. 22, no. 11, pp. 612-613, 1979.
15. M. A. Babar, L. Zhu, and R. Jeffery, "A framework for classifying and comparing software architecture evaluation methods," in ASWEC '04: Proceedings of the 2004 Australian Software Engineering Conference. Washington, DC, USA: IEEE Computer Society, 2004, p. 309.
16. S. A. Butler, "Security attribute evaluation method: a cost-benefit approach," in Proceedings of the 24th International Conference on Software Engineering, ser. ICSE '02. New York, NY, USA: ACM, 2002, pp. 232-240. [Online]. Available: http://doi.acm.org/10.1145/581339.581370 (Pubitemid 35009113)
17. J. Li and X. Su, "Making cost effective security decision with real option thinking," in Proceedings of the International Conference on Software Engineering Advances. Washington, DC, USA: IEEE Computer Society, 2007, pp. 14-. [Online]. Available: http://portal.acm.org/citation.cfm?id=1304609. 1306415
18. B. Malone and A. Siraj, "Tracking requirements and threats for secure software development," in ACM-SE 46: Proceedings of the 46th Annual Southeast Regional Conference on XX. New York, NY, USA: ACM, 2008, pp. 278-281.
19. S. Ferber, P. Heidl, and P. Lutz, "Reviewing product line architectures: Experience report of atam in an automotive context," in Software Product-Family Engineering, ser. Lecture Notes in Computer Science, F. van der Linden, Ed. Springer Berlin / Heidelberg, 2002, vol. 2290, pp. 194-197.
20. A. Erfanian and F. Shams Aliee, "An ontology-driven software architecture evaluation method," in SHARK '08: Proceedings of the 3rd international workshop on Sharing and reusing architectural knowledge. New York, NY, USA: ACM, 2008, pp. 79-86.
21. P. Wallin, J. Froberg, and J. Axelsson, "Making decisions in integration of automotive software and electronics: A method based on atam and ahp," in SEAS '07: Proceedings of the 4th International Workshop on Software Engineering for Automotive Systems. Washington, DC, USA: IEEE Computer Society, 2007, p. 5.
22. T. Kim, I. Y. Ko, S. W. Kang, and D. H. Lee, "Extending atam to assess product line architecture," in Computer and Information Technology, 2008. CIT 2008. 8th IEEE International Conference on, jul. 2008, pp. 790-797.
23. J. Lee, S. Kang, H. Chun, B. Park, and C. Lim, "Analysis of van-core system architecture - a case study of applying the atam," in Software Engineering, Artificial Intelligences, Networking and Parallel/Distributed Computing, 2009. SNPD '09. 10th ACIS International Conference on, may. 2009, pp. 358-363.
24. F. Olumofin and V. Misic, "Extending the atam architecture evaluation to product line architectures," in Software Architecture, 2005. WICSA 2005. 5th Working IEEE/IFIP Conference on, 2005, pp. 45-56. (Pubitemid 46401925)
25. G. N. Rodrigues, D. S. Rosenblum, and S. Uchitel, "Sensitivity analysis for a scenario-based reliability prediction model," in WADS '05: Proceedings of the 2005 workshop on Architecting dependable systems. New York, NY, USA: ACM, 2005, pp. 1-5.