[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to main content
Springer Nature Link
Log in

A Framework for Security Assurance in Component Based Development

  • Conference paper
Computational Science and Its Applications – ICCSA 2005 (ICCSA 2005)

Part of the book series: Lecture Notes in Computer Science ((LNTCS,volume 3481))

Included in the following conference series:

  • 1722 Accesses

Abstract

This paper will investigate the fundamental issues related to building and composing secure components. While all participants will closely cooperate, each will have primary responsibility in one area. The approach outlined in this paper develops a certification process for testing software components for security proper- ties. The anticipated results from this paper are a process, set of core white-box and black-box testing technologies to certify the security of software components and a framework for constructing compositional Component Security Assurance (CSA) based on the security property exposed by the atomic components. The manifestation of the product is a stamp of approval in the form of a digital signature.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Similar content being viewed by others

References

  1. Stephenson, J.: Web Services Architectures for Security. CBDi Journal (February 2003), http://www.cbdiforum.com/

  2. Aoyama, M.: New Age of Software Development: New Component-Based Soft ware Engineering Changes the Way of Software Development. In: 1998 International Workshop on CBSE, ICSE, pp. 124–128 (1998)

    Google Scholar 

  3. CBSE 1998, Proceedings of International Workshop on Component-Based software Engineering, Kyoto Japan (April 1998), http://www.sei.cmu.edu/cbs/ics98/

  4. Herzum, P., Sims, O.: Business Component Factory: A Comprehensive Overview of CBD for the Enterprise, December 1999. OMG press (1999)

    Google Scholar 

  5. Szyperski, C.: Component Software: Beyond Object-Oriented Programming. Addison- Wesley, London (1998), http://www.sei.cmu.edu/cbs/icse98/papers/p14.htm

    Google Scholar 

  6. D’Souza, D.F., Wills, A.C.: Objects, Components, and Frameworks With UML: The Catalysis Approach. Addison-Wesley Object, Reading (1998)

    Google Scholar 

  7. Information Technology-Software Life cycle Process (ISO/IEC 12207), (1998), http://standards.ieee.org/reading/ieee/std/

  8. Vetterling, M., Wimmel, G., Wisspeintner, A.: Requirements analysis: Secure systems development based on the common criteria: the PalME project. In: Proceedings of the tenth ACM SIGSOFT symposium on Foundations of software engineering, November 2002, pp. 129–138 (2002)

    Google Scholar 

  9. Seacord, R.C.: Software Engineering Component Repository. In: Proceedings of 1999 International Workshop on CBSE, Los Angeles (1999), http://www.sei.cmu.edu/cbs/icse99/cbsewkshp.htm

  10. Luqi, J.G.: Toward Automated Retrieval for a Software Component Repository. In: IEEE Conference and Workshop on Engineering of Computer-Based Systems (March 1999)

    Google Scholar 

  11. Kim, H.-K., Cha, J.-E., Kim, J.-Y., Park, E.-J.: Identification of Design Patterns and Components for Network Management System_. In: SNPD 2000 International Conference, May 2000, vol. 1(1), pp. 426–431 (2000)

    Google Scholar 

  12. D’Souza, D., Wills, A.: Objects, Components and Frameworks with UML:The Catalysis Approach. Addison-Wesley, Reading (1998)

    Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Dept. of Computer Engineering, Sangju National University, Sang Ju, South Korea

    Gu-Beom Jeong

  2. Dept. of Computer Engineering, Daejin University, Po Cheon, South Korea

    Guk-Boh Kim

Authors
  1. Gu-Beom Jeong
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Guk-Boh Kim
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Department of Mathematics and Computer Science, University of Perugia, via Vanvitelli, 1, I-06123, Perugia, Italy

    Osvaldo Gervasi

  2. Department of Computer Science, University of Calgary, 2500 University Drive N.W., T2N 1N4, Calgary, AB, Canada

    Marina L. Gavrilova

  3. William Norris Professor, Head of the Computer Science and Engineering Department, University of Minnesota, USA

    Vipin Kumar

  4. Department of Chemistry, University of Perugia, Via Elce di Sotto, 8, P.O. Box, I-06123, Perugia, Italy

    Antonio Laganà

  5. Institute of High Performance Computing, IHCP, 1 Science Park Road, 01-01 The Capricorn, Singapore Science Park II, 117528, Singapore

    Heow Pueh Lee

  6. School of Computing, Soongsil University, Seoul, Korea

    Youngsong Mun

  7. Clayton School of IT, Monash University, 3800, Clayton, Australia

    David Taniar

  8. OptimaNumerics Ltd, P.O. Box, Belfast, United Kingdom

    Chih Jeng Kenneth Tan

Rights and permissions

Reprints and permissions

Copyright information

© 2005 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Jeong, GB., Kim, GB. (2005). A Framework for Security Assurance in Component Based Development. In: Gervasi, O., et al. Computational Science and Its Applications – ICCSA 2005. ICCSA 2005. Lecture Notes in Computer Science, vol 3481. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11424826_5

Download citation

  • DOI: https://doi.org/10.1007/11424826_5

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-25861-2

  • Online ISBN: 978-3-540-32044-9

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation