Integrity is a crucial property in current computing systems. Due to natural or human-made (malicious and non-malicious) faults this property can be violated. Therefore, many methodologies and patterns that check or verify the integrity of systems or ...
Since Gamma et al. published their design patterns, patterns are very popular in the area of software engineering. They provide best practice to handle recurring problems during the software development phase. Three years later, security patterns ...
Software security, which has attracted the interest of the industrial and research community during the last years, aims at preventing security problems by building software without the so-called security holes. One way to achieve this goal is to apply ...
Michael G. Murphy
Patterns have a growing presence in supporting software analysis and development. This paper addresses the issue of patterns as a tool for protecting software integrity, a setting in which patterns have been underused. Two new patterns are described that focus on software integrity in terms of protection and attestation: Integrity protection prevents execution of modified software modules, and integrity attestation ensures software integrity to a remote system. After a brief introductory section, the second section introduces and discusses a number of relevant existing patterns incorporated in or related to the new patterns. A straightforward online banking scenario is then used to motivate the need for attention to integrity issues. The fourth and fifth sections provide well-organized analysis and insight into the relevant aspects of patterns addressing integrity protection and integrity attestation, respectively. The next section looks at how to select and apply the patterns. Five figures and one table help the reader visualize key concepts. In general, the layout of the paper makes it quite easy to read and absorb. This paper should appeal to researchers and practitioners in the software pattern community and those with an interest in the protection of software integrity. Online Computing Reviews Service
Become a reviewer for Computing Reviews.
Association for Computing Machinery
New York, NY, United States
Check if you have access through your login credentials or your institution to get full access on this article.
Sign in