A Hierarchical Security Assessment Model for Object-Oriented Programs

Alshammari, Bandar; Fidge, Colin; Corney, Diane

doi:10.1109/qsic.2011.31

Cited by 12 publications

(12 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Our previously defined metrics [49], [50], [55], and [64] differ from previous work as it focuses on the security of the overall program module structure. We had studied various areas related to the security of object-oriented systems (such as, architecture, design principles, and refactoring) in order to achieve the main goal helping introduce a good security design into an existing program.…”

Section: Discussionmentioning

confidence: 99%

Developing Secure Systems: A Comparative Study of Existing Methodologies

Alshammari¹,

Fidge²,

Corney³

2016

LNSE

Self Cite

View full text Add to dashboard Cite

Abstract-With the increasing demand for developing high-quality and more reliable systems, the process of developing trustworthy computer software is a challenging one. In this paper, we review various approaches to producing more secure systems. This includes established general principles for designing secure systems. It also provides an introduction to general software quality measurements including existing software security metrics. This paper also includes a comparison of the various security metrics for developing secure systems (i.e., architectural, design, and code-level metrics). Lastly, the paper examines the approach of refactoring, illustrates its objectives, and shows how refactoring is generally used for enhancing the quality of existing programs from the perspective of information security. At the end of this paper, we provide a discussion of these three approaches and how they can be used to provide guidance for future secure software development processes.Index Terms-Security design principles, object-orientation, security metrics, secure refactoring. I. INTRODUCTIONMuch existing software is designed with poor consideration of information security which makes it vulnerable to many threats including malicious attacks [1]. Software patches are one of the suggested solutions for many of the security attacks facing software [1] but they are expensive to develop and deploy and do not solve basic design weaknesses in the program code. Another solution to achieve a secure product is by following a trustworthy security process [2]. Security processes, in general, consider many aspects of system design, coding, testing, and auditing [2] (e.g., international security standards such as the Common Criteria [3] or the Trusted Computer Criteria [4]).Another common approach for achieving a secure computer program is by following certain coding guidelines which focus on the level of individual program statements (e.g., to avoid/detect buffer overflows [5]). However, these solutions do not always work effectively and may, in general, even introduce new vulnerabilities to existing software [1]. Adding security features to systems after they have been developed and deployed has been a major cause of many system vulnerabilities [6]. Therefore, applying security principles from the early stages of the software development life cycle (SDLC) would be a better solution [1] and allow a Manuscript received October 10, 2014; revised January 5, 2015. Bandar M. Alshammari is with Aljouf University, Saudi Arabia (e-mail: bmshammeri@ju.edu.sa).Colin J. Fidge is with Queensland University of Technology, Australia (e-mail: c.fidge@qut.edu.au).Diane Corney is with Oracle, Australia (e-mail: diane.corney@oracle.com).more coherent system to be produced [6].Developing a secure system requires a good overall design which takes security into account from the beginning. A suggested methodology by Fernandez [1] incorporates security principles into each stage of the SDLC. It makes sure that each stage complies with these principles th...

show abstract

Section: Discussionmentioning

confidence: 99%

Developing Secure Systems: A Comparative Study of Existing Methodologies

Alshammari¹,

Fidge²,

Corney³

2016

LNSE

Self Cite

View full text Add to dashboard Cite

show abstract

“…At last, the whole project's security was abridged as a solitary security record esteem. The model was accepted by means of a trial, including five open source Java programs; utilizing a static examination device they had created to consequently separate the security measurements from incorporating Java byte code [10]. Software quality often a higher level characteristic that provides a comprehension the internal durability and stability towards used on occasion.…”

Section: Previous Workmentioning

confidence: 99%

Evaluate The Software Through Object Oriented Paradigms

Mateen¹,

Nazir²

2016

IJCA

View full text Add to dashboard Cite

Programming assumes an essential part in today's electronic world. The developer utilizes diverse dialects to build up the product. Keeping in mind the end goal to create programming, it needs a few stages, for example, Analysis, Design, Implementation, Testing and Maintenance. Of these few stages, the investigation and outline get to be fundamental, since these are the most crucial component in the advancement of the product. Presently a-days, a large portion of the product is article stated, in light of the fact that the item arranged dialects give a simple approach to create and keep up the system. This item situated project is comprised of a few divisions based upon the reason. Every division performs some capacities subordinate upon the code. Every one of these divisions are then incorporated to give the single system. In the event that any blunder happened in any part of the project implies, it is important to change the influenced part of a system to expel the mistake. To keep away from this sort of pointless change with the long time term, the engineer must diagram and tests the underlying stage, for example, investigate and configuration. These sorts of tests on examination and outline for an article arranged project did by an innovation called the OOP (Object Oriented Paradigms). In this paper, an approach proposed for examination, the configuration to be completed in the improvement of the system, before begin to execute. These measurements developed by taking or gathering substantial volume of information keeping in mind the end goal to give the measurements reasonable to a wide range of Object-Oriented dialects, for example, Python, Ruby, .Net and R software for big data analysis. The proposed work gives the summing up procedure which termed as GenM (Generalized Measurement) strategy on the item situated programming. This is finished by executing the arrangement record for recognizing the mistake rate. Along these lines, this paper gives proficient systems to OOP.

show abstract

“…In paper [3], Bandar Alshammari et al presented a hierarchical model for assessing an object-oriented program's security. Security was quantified using structural properties of the program code to identify the ways in which 'classified' data values may be transferred between objects.…”

Section: Related Workmentioning

confidence: 99%