Loading...
Please wait, while we are loading the content...
Similar Documents
Threat-driven modeling framework for secure software using aspect-oriented Stochastic Petri nets
| Content Provider | Semantic Scholar |
|---|---|
| Author | Sherief, Nada H. Abdel-Hamid, Ayman Mahar, Khaled M. |
| Copyright Year | 2010 |
| Abstract | Design-level vulnerabilities are a main source of security risks in software. To improve the reliability of software design, this paper presents a modified threat-driven modeling framework, to determine which threats require mitigation and how to mitigate the threats. To specify the functions and threat mitigations of a security design as a whole, aspect-oriented Stochastic Petri nets are used as a formal amplified model. Moreover, this paper proposes an adapted augmented approach to define software security metrics based on vulnerabilities included in the software systems and their impacts on software quality. The Common Vulnerability Scoring System (CVSS), a vulnerability scoring system designed to provide a standardized method for rating software vulnerabilities, is used as the basis in the metric definition and calculations. Furthermore, a case study is detailed, which shows the essence and feasibility of using aspect-oriented stochastic Petri net models for threat modeling and that the proposed security metrics are consistent with common practice. |
| Starting Page | 1 |
| Ending Page | 8 |
| Page Count | 8 |
| File Format | PDF HTM / HTML |
| Alternate Webpage(s) | http://www.aast.edu/pheed/staffadminview/getPDF.php?addcon=1&language_id=1')&research_id=1&ser=64075 |
| Journal | 2010 The 7th International Conference on Informatics and Systems (INFOS) |
| Language | English |
| Access Restriction | Open |
| Content Type | Text |
| Resource Type | Article |
