SecuRe -- An Approach to Recommending Security Design Patterns

TL;DR

SecuRe is a method that leverages security design patterns and knowledge engineering to provide security recommendations for software architecture, aiming to bridge the expertise gap.

Contribution

It introduces a novel approach that adapts design patterns and knowledge engineering for security recommendations in software design.

Findings

Initial case study demonstrates feasibility

Provides a structured recommendation process

Lifts security design knowledge to reusable patterns

Abstract

Security is an important quality of software systems, but there is a huge lack of security experts. To overcome this gap, we aim to make security design knowledge reusable for architects by proposing the SecuRe recommendation approach to secure software design. It lifts design patterns and knowledge engineering concepts to security-related design recommendations for software architectures. This paper presents the central concepts of this approach, the overall recommendation process, and the first results from an initial case study.