Analysis and Evaluating Security of Component-Based Software Development: A Security Metrics Framework

Abstract

-Evaluating the security of software systems is a complex problem for the research communities due to the multifaceted and complex operational environment of the system involved. Many efforts towards the secure system development methodologies like secSDLC by Microsoft have been made but the measurement scale on which the security can be measured got least success. As with a shift in the nature of software development from standalone applications to distributed environment where there are a number of potential adversaries and threats present, security has been outlined and incorporated at the architectural level of the system and so is the need to evaluate and measure the level of security achieved . In this paper we present a framework for security evaluation at the design and architectural phase of the system development. We have outlined the security objectives based on the security requirements of the system and analyzed the behavior of various software architectures styles.As the component-based development (CBD) is an important and widely used model to develop new large scale software due to various benefits like increased reuse, reduce time to market and cost. Our emphasis is on CBD and we have proposed a framework for the security evaluation of Component based software design and derived the security metrics for the main three pillars of security, confidentiality, integrity and availability based on the component composition, dependency and inter component data/information flow.The proposed framework and derived metrics are flexible enough, in way that the system developer can modify the metrics according to the situation and are applicable both at the development phases and as well as after development.

2DCBS: A Model for Developing Dependable Component-Based Software

“…Nonetheless, the task of embedding dependability attributes into the software component development process is less challenging than the task of evaluating the dependability of these attributes [20] because the requirements of dependability attributes must be specified during the early stages of software component development, along with the complex nature of the operational environment itself. A well-established scale that can measure the dependability of a software component remains difficult to establish in the research community [21].…”

A Smart and Generic Secured Storage Model for Web based Systems

“…Generally Third party verifiers [3] [12] are used to manage these services between cloud and client system. Though there are various third parties are available as an individual in managing the transmission of the data, there is a need for an integrated security [1] model to provide secured transaction between cloud and client system. Among those verifiers, the third party accounting system is used to examine and verify the data sharing in the storage to ensure that the unauthorized person do not access the information.…”

Dependability Attributes for Increased Security in Component-Based Software Development

“…Many studies have stated that the only means to solve software vulnerability is to consider software security development (Khaled and Han, 2006;Kim, 2004;McGraw, 2004;Mir and Quadri, 2012;Simpson, 2012). However, efforts to measure and improve software security remain under investigation (Alberts et al, 2012;Colombo et al, 2012;Karen et al, 2006;Lai, 2012;Steward et al, 2012).…”