Beyond One-Shot Security: Requirements-driven Run-time Security Adaptation to Reduce Code Patching (SecVolution@Run-time)

信息系统暴露在不断变化的环境中，需要不断更新。软件的“老化”不是由于磨损，而是由于无法与环境保持同步。安全是现代信息系统质量的一个日益重要的方面。同时，它特别受到上述“软件老化”风险的影响。当信息系统处理公司或组织的资产时，任何安全漏洞都可能被攻击者利用。攻击者的知识和技术的进步是上述安全相关信息系统环境的一部分。因此，过时的安全防范措施可能导致突然的重大损失。因此，长期存在的信息系统的安全需要知识和软件的持续和系统的发展来保护它。我们的目标是开发支持安全需求的技术、工具和过程，并为不断发展的信息系统设计分析技术，以确保“终身”遵守安全需求。我们将以secq在以前的联合工作中开发的安全需求和设计方法为基础。作为一个核心特性，该方法支持重用在安全关键软件开发过程中获得的安全工程经验，并将其反馈到开发过程中。我们将开发启发式工具和技术，以支持对环境中相关变化的启发。调查结果将正式用于半自动安全更新。在长寿信息系统的演变过程中，将监测环境的变化，并将其转化为保护或恢复其安全水平的适应措施。

Information systems are exposed to constantly changing environments which require constant updating. Software "ages" not by wearing out, but by failing to keep up-to-date with its environment. Security is an increasingly important quality aspect in modern information systems. At the same time, it is particularly affected by the above-mentioned risk of "software ageing". When an information system handles assets of a company or an organization, any security loophole can be exploited by attackers. Advances in knowledge and technology of attackers are part of the above-mentioned environment of a security-relevant information system. Outdated security precautions can, therefore, permit sudden and substantial losses. Security in long-living information systems, thus, requires an on-going and systematic evolution of knowledge and software for its protection. Our objective is to develop techniques, tools, and processes that support security requirements and design analysis techniques for evolving information systems in order to ensure "lifelong" compliance to security requirements. We will build on the security requirements & design approach SecReq developed in previous joint work. As a core feature, this approach supports reusing security engineering experience gained during the development of security-critical software and feeding it back into the development process. We will develop heuristic tools and techniques that support elicitation of relevant changes in the environment. Findings will be formalized for semi-automatic security updates. During the evolution of a long-living information system, changes in the environment will be monitored and translated to adaptations that preserve or restore its security level.