Skip to Main content Skip to Navigation
New interface

Rigorous development of secure architecture within the negative and positive statements : properties, models, analysis and tool support

Quentin Rouland 1 
1 IRIT-ARGOS - Advancing Rigorous Software and System Engineering
IRIT - Institut de recherche en informatique de Toulouse
Abstract : Our society has become more dependent on software-intensive systems, such as Information and Communication Technologies (ICTs) systems, to perform their daily tasks (sometimes critical). However, in most cases, organizations and particularly small ones place limited value on information and its security. In the same time, achieving security in such systems is a difficult task because of the increasing complexity and connectivity in ICT development. In addition, security has impacts on many attributes such as openness, safety and usability. Thus, security becomes a very important aspect that should be considered in early phases of development. In this work, we propose an approach in order to secure ICT software architectures during their development by considering two visions to formulate security statements using the negative view, as the study of threats (e.g., usurpation) and positive view as the study of the security objectives (e.g., confidentiality). The contributions of this work are threefold: (1) an integrated design framework for the specification and analysis of reusable (formal) model libraries for secure software architectures; (2) a novel model-based methodology for developing secure software architecture by reuse; and (3) a set of supporting tools. The approach associates Model-Driven Engineering (MDE) and formal techniques to design a set of modeling languages for specifying and analyzing architecture and property models which allows reuse of capitalized security-related know-how. The results are provided as two complementary artifacts: (a) a process of development of reusable formal model libraries for the specification and verification of security threats and objectives by a security expert; and (b) a process of secure architectural design and analysis by an architect reusing the libraries specified in the process (a). Process (a) includes the following activities: (1) the formal specification of the security threats and objectives as the properties of a model using technology-independent specification language; (2) the interpretation of the resulted model libraries in a tooled formal language; and (3) the definition of security policies as abstract security countermeasures to ensure security properties. Process (b) includes the following activities: (1) security analysis of a concrete architecture model to verify the security requirements and identify security issues reusing the property models; [...]
Complete list of metadata
Contributor : ABES STAR :  Contact
Submitted on : Monday, June 20, 2022 - 3:44:11 PM
Last modification on : Tuesday, August 30, 2022 - 3:49:14 AM
Long-term archiving on: : Thursday, September 22, 2022 - 10:57:54 AM


Version validated by the jury (STAR)


  • HAL Id : tel-03699867, version 1


Quentin Rouland. Rigorous development of secure architecture within the negative and positive statements : properties, models, analysis and tool support. Library and information sciences. Université Paul Sabatier - Toulouse III, 2021. English. ⟨NNT : 2021TOU30251⟩. ⟨tel-03699867⟩



Record views


Files downloads