An Aspect-based Approach for Analyzing Security System Architectures

一种基于方面的安全系统架构分析方法

• 批准号: 0098120
• 负责人: Yi Deng
• 金额: $ 27.15万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-02-15 至 2002-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0098120&HistoricalAwards=false
• 关键词: Aspect; based; Approach; Analyzing; Security

Security system architecture, which defines structure of the system, the interaction and coordination among its components, has profound impacts on the security system' performance, reliability, interoperability and consistency among other critical properties. The purpose of this project is to develop a formal methodology to model security systems architectures and to assess key quality attributes of the composition. The proposed methodology has several integrated elements: First, an aspect-based architecture modeling framework is developed, which organized heterogeneous system properties into self-contained and yet integrated multi-level aspect models. Each aspect model can be constructed, changed and analyzed individually with minimal burden of complexity from the other models. Second, architecture-based constraint patterns are investigated. These constraint patterns define what conditions or properties that each component and their composition must satisfy under a security architecture. Based on the aspect architecture models, techniques will be developed to decompose system-wide constraint patterns onto individual components and to verify the consistency between global and component constraints. These patterns are the behavioral basis for checking and assuring end-to-end properties in system composition. Third, mature but individually homogeneous analysis techniques will be combined into a flexible and scalable method for analyzing the aspect models against their constraint patterns.

安全系统架构定义了系统的结构、其组件之间的交互和协调，对安全系统的性能、可靠性、互操作性和一致性等关键属性具有深远的影响。 这个项目的目的是开发一个正式的方法来模拟安全系统架构，并评估组成的关键质量属性。 所提出的方法有几个集成的元素：首先，一个基于方面的架构建模框架的开发，组织异构系统属性成自包含的，但集成的多层次方面模型。 每个方面模型都可以单独构建，更改和分析，而其他模型的复杂性负担最小。 其次，基于架构的约束模式进行了研究。 这些约束模式定义了每个组件及其组合在安全体系结构下必须满足的条件或属性。 方面架构模型的基础上，技术将被开发到各个组件的系统范围内的约束模式分解，并验证全局和组件约束之间的一致性。 这些模式是在系统组合中检查和确保端到端属性的行为基础。 第三，成熟的，但个别同质的分析技术将被组合成一个灵活的和可扩展的方法来分析方面模型对他们的约束模式。