SEKE 2012 Proceedings - Knowledge Systems Institute

concerns. A secure connector can be reused in different
applications if it m atches the security requirem ent and
communication style between application components. To
validate this approach, the s ecure connectors have been
implemented in an electronic commerce application.
This paragraph describes future resea rch for sec ure
connectors. The security services provided by secure
connectors described in t his paper are confidentiality,
integrity, non-repudiation, authentication, and
authorization. Secure c onnectors can be extended to
include an availability security service, which should be
capable of preventing deliberate denial of services in a
software application. In addition, security connectors can
be specialized to ones that realize specific m ethods or
algorithms. For e xample, a secure connector containing
access control security servi ce can be implemented with
role-based access control or mandatory access control. To
realize these specific methods or algorit hms, a secure
connector could be specialized to create the a ppropriate
secure objects. In addition, secure connectors can be
building blocks for composing secure software
architectures along with application components. Future
work needs more investigation on how software
architectures for secure applications can be composed of
secure connectors and application components.
References
[1] S. Banerjee, C. A. Mattmann, N. Medvidovic, and L.
Golubchik, “Leveraging Architectural Models to Inject
Trust into Soft ware Systems,”
Proceedings of the ICSE 2005 Works hop on Software
Engineering for Sec ure Systems, St. L ouis, Missouri,
May, 2005.
[2] M. Moriconi, X. Qian, R. A. Riemenschneider, and Li
Gong “Secure Software Architectures,” IEEE Symposium
on Security and Privacy, 1997.
[3] Y. Deng, J. Wang, J. J. P. Tsai, and K. Beznosov, “An
Approach for Modeling and Analysis of Security System
Architectures,” IEEE Transactions on Knowledge and
Data Engineering, vol.15, no.5, pp.1099-1119, Sept/Oct,
2003.
[4] H. Gomaa, D. A. Menasce, and M. E. Shin, “Reusable
Component Patterns for Distributed Software
Architectures,” Proceedings of ACM Symposium on
Software Reusability, ACM Press, Pages 69-77, Toronto,
Canada, May 2001.
for Secure Systems, St. Louis, Missouri, USA, May 15-16,
2005.
[6] G. Gong, I. Ray, and R . France, “Using Aspects to
Design a Sec ure System,” Proceedings of the 8 th IEEE
International Conference on Engineering of Com plex
Computer Systems, December, 2002.
[7] H. Gomaa, M. E. Shin , “Modeling Complex Systems
by Separating Application and Security Concerns” 9 th
IEEE International Conference on Engineering of
Complex Computer Systems (ICECCS 2004), Italy, April,
2004.
[8] M. E. Shin and H. Gomaa, “Software Modeling of
Evolution to a Secure Application: From Requirements
Model to Soft ware Architecture,” Science of Computer
Programming, Volume 66, Issue 1, April 2007, pp. 60-70.
[9] H. Gomaa, “Software Modeling and Design: UML,
Use Cases, Patterns, and Software Architectures”,
Cambridge University Press, February 2011.
[10] G. Booch, J. Rumbaugh, and I. Jacobson, “The
Unified Modeling Language User Guide,” Addison
Wesley, 2nd Edition, 2005.
[11] J. Ru mbaugh, G. Booch, and I. Jaco bson, “The
Unified Modeling Language Reference Manual,”
Addison-Wesley, 2 nd Edition, 2004.
[12] R. S. Sandhu, E. J. Coyne, H. L. Feinstein, and C. E.
Youman, “Role-based access control models,” IEEE
Computer, Volume 29, Issue 2, February 1996, pp. 38-47.
[13] C. P. Pfleeger, a nd S. L. Pfleege r, “Security in
Computing,” Prentice-Hall, Inc., third edition, 2002.
[14] F. B uschmann, R. M eunier, H. Rohnert, and P.
Sommerlad, "Pattern Oriented Software Architecture: A
System of Patterns," John Wiley & Sons, 1996.
[15] R. N. Ta ylor, N. Medvidovic, and E. M. Dashofy,
“Software Arcthiecture: Foundations, The ory, and
Practice,” John Wiley & Sons, 2010.
[16] D. Bas h, M. Clavel, a nd M. Egea, “A Decade of
Model-Driven Security,” 16th ACM symposium on
Access control models and technol ogies SACMAT11,
Innsbruck, Austria, June 15-17, 2011.
[5] J. Re n, R. Taylor , P. Dourish, and D. Redmiles,
“Towards An Architectural Treatment of Softwa re
Security: A Connector-Centric Approach,”
Proceedings of the Workshop on Software Engineering
399