A Software Architectural Approach to Security by Design

This paper shows how an architecture description notation that has support for timed events can be used to provide a meta-language for specifying exact communication semantics. The advantages of such an approach is that a designer is made fully aware of the ramifications of her design choices so that an attacker can no longer take advantage of hidden assumptions.

• Type: Conference
• Year: 2006
• Where: COMPSAC
• Authors: Arnab Ray, Rance Cleaveland
• Keywords: Architecture Description Notation, COMPSAC 2006, Exact Communication Semantics, Hidden Assumptions, Software Engineering