资源描述:
《Towards a Conceptual Framework走向概念框架》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、Chapter2TowardsaConceptualFrameworkforSecurityPatternsCliveBlackwellAbstractWeintroducesecuritypatternsasthemostmaturedomainwithincyberpatterns,andoutlineaconceptualframeworktohelpunderstandanddevelopgoodsecuritypatterns.Securitypatternshelpusmovefromanimprovisedcr
2、afttoengineeringdisciplinebecausetheytransferknowledgeaboutprovensolutionsinanunderstandableandreusableformattoexperiencedusersandnovicesalike.Althoughsecuritypatternsarewidelyknown,manyquestionsremainunansweredregardingtheirconceptualfoundationandpracticaluse.Wech
3、aracterisethecurrentpatternschemesusingtheZachmanFrameworkforenterprisearchitecturemodelling,whichallowsustostructureandposequestionsaboutboththeproblemdomainandcorre-spondingsolutionsprovidedbysecuritypatterns.WeproposeaparallelsecurityplaneoverlayingtheentireZach
4、mangridallowingtheseparateconsiderationofsecuritywithinthesecurityplaneusingtheinterrogativequestions(who,what,where,when,whyandhow)toevaluatethesixaspects.Theintegrationbetweensecurityandfunc-tionalconcernsissimilarlyaidedbyusingthecorrespondencebetweenaspectsinth
5、esecurityandfunctionalplanestodecomposeandexaminetherelationshipbetweensecuritypatternsandproblemcontext.Wealsobrieflydiscusssecuritypatternsastransformations,andrelatedconceptssuchastacticsthatmayusefullybeappliedtosecurity.Weconcludewithasetofunsolvedchallengesfor
6、securitypatterns.Thisdiscussionisrelevanttoothertypesofcyberpatternsuchasattackpatterns,andmayaidtheeventualdevelopmentofacomprehensiveframeworkforcyberpatterns.C.Blackwell(B)DepartmentofComputingandCommunicationTechnologies,OxfordBrookesUniversity,WheatleyCampus,W
7、heatley,OxfordOX331HX,UKe-mail:CBlackwell@brookes.ac.ukC.BlackwellandH.Zhu(eds.),Cyberpatterns,DOI:10.1007/978-3-319-04447-7_2,17©SpringerInternationalPublishingSwitzerland201418C.Blackwell1IntroductionandRationaleDesigningasecuresystemisahardendeavourrequiringuniq
8、ueskillsthatwecannotexpectfromtypicaldevelopmentteams.Itwouldbehelpfuliftherewereasetofeasilyusablebuildingblocksthatprovideafoundationforsecures