Measuring Attack Surface in Software Architecture
Measuring Attack Surface in Software Architecture
复制标题
测量软件架构中的攻击面
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
D. Garlan
中科院分区：
文献类型：
--
作者：
Jeffrey Gennari;D. Garlan
在本报告中，我们展示了如何适应“攻击表面”的概念，以正式评估设计层面的安全属性，并在建筑设计中识别漏洞。通过减少攻击表面来提高安全性。 Manadhata和Jeannette机翼没有他们的工作格式，我们的作品也不能感谢软件工程研究所的支持。 DAAD19-02-1-0389和陆军研究办公室的W911NF-09-1-0273。
In this report we show how to adapt the notion of “attack surface” to formally evaluate security properties at the architectural level of design and to identify vulnerabilities in architectural designs. Further we explore the application of this metric in the context of architecture-based transformations to improve security by reducing the attack surface. These transformations are described in detail and validated with a simple experiment. The authors would like to acknowledge Pratyusa Manadhata and Jeannette Wing; without their work formalizing the attack surface metric, our work would not be possible. The authors would also like to thank the Software Engineering Institute for supporting this work. This research was supported in part by CyLab at Carnegie Mellon under grants DAAD19-02-1-0389 and W911NF-09-1-0273 from the Army Research Office.