Logo des Repositoriums

Auflistung nach Autor:in "Rudolph, Carsten"

1 - 6 von 6
  • Konferenzbeitrag
    Building secure systems using a security engineering process and security building blocks
    (Software Engineering 2013 - Workshopband, 2013) Rein, Andre; Rudolph, Carsten; Ruiz, Jose Fran.
    In today's software development process, security related design decisions are rarely made early in the overall process. Even if security is considered early, this means that in most cases a more-or-less encompassing security requirements analysis is made. Based on this analysis best-practices, ad-hoc design decisions or individual expertise is used to integrate security during the development process or after weaknesses are found after the deployment. This paper explains the SecFutur security engineering process with a focus on Security Building Block Models which are used to build security related components, namely Security Building Blocks. These Security Building Blocks represent concrete security solutions and can be accessed via SecFu- tur patterns on the level of domain-specific models for particular application domains. The goal of this approach is to provide already defined and tested security related software components, which can be used early in the overall development process, to support security-design-decision already while modeling the software-system. Security Building Blocks are discussed in the context of the SecFutur Security Engineering Process with its requirement analysis and definition of security properties.
  • Konferenzbeitrag
    CeMoSS – Certification and model-driven development of safe and secure software
    (Software Engineering 2014, 2014) Huhn, Michaela; Gerken, Stefan; Rudolph, Carsten
  • Konferenzbeitrag
    Parameter – Confidentiality
    (INFORMATIK 2003 - Mit Sicherheit Informatik, Schwerpunkt "Sicherheit - Schutz und Zuverlässigkeit", 2003) Gürgens, Sigrid; Ochsenschläger, Peter; Rudolph, Carsten
    Confidentiality of certain parameters is an essential security requirement for many security sensitive applications. In terms of formal language theory we introduce the notion of parameter-confidentiality relative to an agent’s knowledge about the system. By considering publicly known dependencies of parameter values, exact specifications of the required confidentiality properties are possible. The new notion complements previous concepts of non-interference, secrecy and indistinguishability.
  • Konferenzbeitrag
  • Konferenzbeitrag
    ZeMoSS-Workshop: Zertifizierung und modellgetriebene Entwicklung sicherer Software
    (Software Engineering 2013, 2013) Huhn, Michaela; Gerken, Stefan; Rudolph, Carsten
  • Konferenzbeitrag
    Zertifizierung und modellgetriebene Entwicklung sicherer Software (ZeMoSS 2012)
    (Software Engineering 2012, 2012) Huhn, Michaela; Gerken, Stefan; Rudolph, Carsten