Securing design patterns for distributed systems

Security in Distributed, Grid, Mobile, and Pervasive Computing

Volumn , Issue , 2007, Pages 53-66

  Fernandez, Eduardo B ^a   Larrondo Petrie, Maria M ^a  

^a Florida Atlantic University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84862275346     PISSN: None     EISSN: None     Source Type: Book    
DOI: None     Document Type: Chapter

References (42)

1. K.P. Birman. Like it or not, web services are distributed objects. Comm. of the ACM, vol. 47, No. 12, December 2004, 60–62.
2. A. Braga, C. Rubira, and R. Dahab. Tropyc: Apattern language for cryptographic object-oriented software. Chapter 16 in Pattern Languages of Program Design 4 (N. Harrison, B. Foote, and H. Rohnert, Eds.).
3. F. Buschmann, R. Meunier, H. Rohnert, P. Sommerland, and M. Stal. Pattern- Oriented Software Architecture. Wiley, 1996.
4. H. Chu, C. You, and C. Teng. Challenges: Wireless web services. Proc of the 10th International Conference on Parallel and Distributed Systems (ICPADS’04).
5. S. Crane, J. Magee, and N. Pryce. Design patterns for binding in distributed systems. Proc. of the OOPSLA-95 Workshop on Design Patterns for Concurrent, Parallel and Distributed Object-Oriented Systems. October 1995. Austin, Texas.
6. N. Delessy, E.B. Fernandez, and T. Sorgente. Patterns for the eXtensible Access Control Markup Language. Proc. of the Pattern Languages of Programs Conference (PLoP 2005). Allerton Park, IL.
7. S. Demurjian, K. Bessette, T. Doan, and C. Phillips. Concepts and Capabilities of Middleware Security. Chapter 9 in Middleware for Communications, Q. H. Mahmoud (Ed.). JohnWiley and Sons, 2004.
8. M. Eichberg and M. Mezini. Alice: Modularization of middlewar using aspectoriented programming. Proc. of the Conf. on Software Eng. and Middleware (SEM) 2004. Linz, Austria, Sept. 2004.
9. E.B. Fernandez and X. Yuan. Semantic analysis patterns. Proc. of 19th Int. Conf. on Conceptual Modeling. ER2000, 183-195. Also available from: http://www.cse.fau.edu/ed/SAPpaper2.pdf.
10. E.B. Fernandez and R. Pan. A Pattern Language for security models. Proc. of PLoP 2001. http://jerry.cs.uiuc.edu/plop/plop2001/accepted_submissions.
11. E.B. Fernandez and J.C. Sinibaldi. More patterns for operating system access control, Proc. of the 8th European Conference on Pattern Languages of Programs, EuroPLoP 2003. http://hillside.net/europlop, 381–398.
12. E.B. Fernandez.Amethodology for secure software design. 2004 Intl. Symposium on Web Services and Applications (ISWS’04). Las Vegas, NV, June 21–24, 2004.
13. E.B. Fernandez, S.A. Rajput, M. VanHilst, and M.M. Larrondo-Petrie. Some security issues of wireless systems, in Advanced Distributed Systems, F.F. Ramos, V. Larios R. and H. Unger (Eds.). Proc. of 5th International School and Symposium on Advanced Distributed Systems, ISSADS 2005, IEEE, Guadalajara, Mexico, January 24–28, 2005. Revised Selected Papers, LNCS 3563, Springer, 2005, 388–396.
14. E.B. Fernandez and T. Sorgente. A pattern language for secure operating system architectures. Proc. of the 5th Latin American Conference on Pattern Languages of Programs. Campos do Jordao, Brazil, August 16–19, 2005.
15. E.B. Fernandez, M.M. Larrondo-Petrie, T. Sorgente, and M. Van Hilst.Amethodology to develop secure systems using patterns, Chapter 5 in Integrating security and software engineering: Advances and FutureVision. H. Mouratidis and P. Giorgini (Eds.), IDEA Press, 2006. 107–126.
16. E.B. Fernandez, S. Huang, and M.M. Larrondo-Petrie. Building secure middleware using patterns. Proc. of the IEEE Int. Symposium and School on Advanced Distributed Systems (ISSADS 2006).
17. E.B. Fernandez, M. VanHilst, M.M. Larrondo-Petrie, and S. Huang. Defining security requirements through misuse actions, Advanced Software Engineering: Expanding the Frontiers of Software Technology. S.F. Ochoa and G.-C. Roman (Eds.), International Federation for Information Processing. Springer, 2006, 123–137.
18. S.N. Foley, T.B. Quillinan, M. O’Connor, B.P. Mulcahy, and J.P. Morrison. A framework for heterogeneous middleware security. Proc. of the 13th Heterogeneous Computing Workshop (HCW’04), 1–11.
19. E. Gamma, R. Helm, R. Johnson, J. Vlissides. Design Patterns: Elements of Reusable Object-Oriented Software, Addison-Wesley, Boston, 1994.
20. D. Geibs, Middleware challenges ahead. Computer. June 2001, IEEE, 24–31.
21. G. Georg, Indrakshi Ray, and R. France. Using aspects to design a secure system, Proceedings of the Eighth IEEE International Conference on Engineering of Complex Computer Systems. Greenbelt, MD, December 2002.
22. Gramm-Leach-Bliley Act, Senate Banking Committee, Monday, November 1, 1999 http://www.senate.gov/banking/conf/fincon.pdf.
23. http://www.hipaa.org/.
24. R.K. Keller, J. Tessier, and G. von Bochmann. A pattern system for network management interfaces. Comm. of the ACM, vol. 41, No. 9, September 1998, 86–93.
25. C. Kobryn. Modeling components and frameworks with UML. Comm of the ACM, October 2000, 31–38.
26. U. Lang, D. Gollmann, R. Schreiner.Verifiable identifiers in middleware security. Proceedings 17th Annual Computer Security Applications Conference, ACSAC, 2001, 10–14 Dec. 2001.
27. P. Morrison and E.B. Fernandez. Securing the broker pattern, Proc. of the 11th European Conf. on Pattern Languages of Programs (EuroPLoP 2006).
28. Object Management Group, http://www.omg.com.
29. R. Pereira e Silva and R.T. Price. Component interface pattern. Proc. of the Pattern Languages of Programs Conference, PLoP 2002.
30. M. Pistoia, N. Nagaratnam, L. Koved, and A. Nadalin. Enterprise Java Security: Building Secure J2EE Applications. Addison-Wesley, 2004.
31. SAML, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security.
32. One Hundred Seventh Congress of the United States of America, Sarbanes Oxley Act of 2002, January 23, 2002, http://news.findlaw.com/hdocs/docs/gwbush/sarbanesoxley072302.pdf.
33. D.C. Schmidt. Using design patterns to develop reusable object-oriented communication software. Comm. of the ACM, vol. 38, No. 10, October 1995, 65–74.
34. D.C. Schmidt and C. Cleeland. Applying patterns to develop extensible ORB middleware. IEEE Comm. Mag., April 1999, 54–63.
35. D.C. Schmidt, M. Stal, H. Rohnert, and F. Buschmann. Pattern-Oriented Software Architecture. Wiley, 2000.
36. M. Schumacher, E.B. Fernandez, D. Hybertson, F. Buschmann, and P. Sommerlad. Security Patterns: Integrating Security and Systems Engineering. J. Wiley and Sons, 2006.
37. A. Silberschatz, P. Galvin, G. Gagne. Operating System Concepts 7th Ed. John Wiley & Sons, 2005.
38. R.C. Summers. Secure Computing: Threats and Safeguards. McGraw-Hill, 1997.
39. N. Wang, K. Parameswaran, and D.C. Schmidt. The design and performance of meta-programming mechanisms for object request broker middleware. Proc. of the 6th Usenix Conf. on Object Oriented Technology and Systems (COOTS), 2001.
40. J. Warmer and A. Kleppe. The Object Constraint Language, 2nd Ed. Addison- Wesley, 2003.
41. J. Yoder and J. Barcalow. Architectural patterns for enabling application security. Proc. of the 4th Conference on Patterns Language of Programming (PLoP’97), http://jerry, cs.uiuc.edu/plop/plop97. Also Chapter 15 in Pattern Languages of Program Design, Vol. 4 (N. Harrison, B. Foote, and H. Rohnert, Eds.), Addison- Wesley, 2000.
42. XACML, http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml.