Recognition and validation of security patterns

信息安全在软件工程中越来越重要。开发人员在软件的设计和演进过程中面临着安全问题。类似于著名的设计模式，所谓的安全类型是为了提供解决反复出现的软件设计问题的解决方案，但重点是安全问题。我们的项目旨在检测和验证程序中相关的安全类型。我们将开发一种方法和一个支持半自动工具来更好地支持安全审查。为了找出相关的安全模式，并进一步了解它们在软件设计和安全审计中的作用，我们将与安全专家和开发人员进行研究。

Information security is increasingly gaining importance in software engineering. Developers are facing security issues during the design and evolution of software. Analogously to the well known design patterns, so called securitypatterns were proposed to provide solutions to recurring softwaredesign problems, yet with the focus on security issues.Our projects aims at detecting and validating relevant securitypatterns in programs. We will develop a method and a supportingsemi-automated tool to better support security reviews. In order to identify relevant security patterns and further understand their role in software design and security audits, we will conduct studies with security experts and developers.