Mitigating Injection-Based Weaknesses: A Flexible Template Architecture.

Abstract

Addressing vulnerabilities in software requires consideration of architectural issues. This paper presents a flexible architecture using design patterns to address software vulnerabilities. The architecture employs an extensible security template for mitigating injection-based weaknesses in authentication, authorization, and data validation. The paper presents the architecture's associated algorithms, demonstrates the mapping of weaknesses to use cases and the utilization of architectural, behavioral, and security patterns to mitigate them. A case study application is used to show the prevention of use-case specific weaknesses.