• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>International conference on web information systems engineering >Building Secure Web Systems Architectures Using Security Patterns
【24h】

Building Secure Web Systems Architectures Using Security Patterns

机译：使用安全模式构建安全的Web系统架构

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Software patterns are encapsulated solutions to recurrent problems in a context. Patterns combine experience and good practices to develop basic models that can be used to build new systems, to evaluate existing systems, and as a communication medium for designers. Security patterns provide guidelines for secure system requirements, design, and evaluation. We consider their structure, show a variety of them, and illustrate their use in the construction of secure web-based systems. These patterns include among others Authentication, Authorization/Access Control, Firewalls, Secure Broker, Web Services Security, and Cloud Security patterns. We have built a catalog of over 100 security patterns. We complement these patterns with misuse patterns, which describe how an attack is performed from the point of view of the attacker, we show XSS as an example. We integrate patterns in the form of security reference architectures that represent complete systems. Reference architectures have not been used much in security and we explore their possibilities. We show how to apply these patterns through a secure system development methodology. We introduce patterns in a conceptual way, relating them to their purposes and to the functional parts of the architecture. Example architectures include a browser and a cloud computing system. The use of patterns can provide a holistic view of security, which is a fundamental principle to build secure systems. Patterns can be applied throughout the software lifecycle and provide an ideal communication tool for the builders of the system. They are also useful to record design decisions. The patterns and reference architectures are shown using UML models and examples are taken from my book: "Security patterns in practice: Building secure architectures using software patterns", Wiley Series on Software Design Patterns, 2013. The talk also includes some recent patterns, e.g. Network Function Virtualization. Security is a fundamental quality for any web system. Most proposed solutions are ad hoc or partial; regretfully security must be holistic and systematic. Patterns provide the basis for systematic and holistic approaches and are becoming more important every day. Attendees will be able to understand the idea behind security patterns and security reference architectures, get acquainted with some of them, and use them to build architectures for secure systems.
机译：软件模式是在上下文中封装的解决方案。模式组合经验和良好的做法来开发可用于构建新系统的基本模型，以评估现有系统，以及设计人员的通信介质。安全模式提供了安全系统要求，设计和评估的指导。我们考虑其结构，显示各种各样的结构，并说明他们在建设安全的基于Web的系统中的用途。这些模式包括其他身份验证，授权/访问控制，防火墙，安全代理，Web服务安全性和云安全模式。我们已经建立了超过100个安全模式的目录。我们补充了滥用模式的这些模式，这描述了如何从攻击者的角度执行攻击，我们将XSS显示为示例。我们以安全参考架构的形式集成了代表完整系统的模式。参考架构没有在安全性中使用太多，我们探索了他们的可能性。我们展示了如何通过安全的系统开发方法应用这些模式。我们以概念方式介绍模式，将它们与其目的相关联以及架构的功能部件。示例体系结构包括浏览器和云计算系统。模式的使用可以提供安全的整体视图，这是构建安全系统的基本原则。模式可以在整个软件生命周期中应用，并为系统的构建器提供理想的通信工具。他们也有助于记录设计决策。使用UML模型显示模式和参考体系结构，并从我的书中获取示例：“实践中的安全模式：使用软件模式构建安全架构”，Wiley系列在软件设计模式，2013年。谈话还包括一些最近的模式，例如最近的一些模式。网络功能虚拟化。安全性是任何网络系统的基本质量。最拟议的解决方案是临时或部分;遗憾的安全必须是整体和系统的。模式为系统和整体方法提供了基础，每天都变得更加重要。与会者将能够理解安全模式和安全参考体系结构背后的想法，熟悉其中一些，并使用它们来构建安全系统的架构。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号