Recognition and validation of security patterns

信息安全在软件工程中越来越重要。开发人员在软件的设计和发展过程中面临着安全问题。类似于著名的设计模式，所谓的安全模式被提出来为经常出现的软件设计问题提供解决方案，但重点是安全问题。我们的项目旨在检测和验证程序中的相关安全模式。我们将开发一种方法和一个支持半自动化工具，以更好地支持安全审查。为了识别相关的安全模式，并进一步了解它们在软件设计和安全审计中的作用，我们将与安全专家和开发人员进行研究。

Information security is increasingly gaining importance in software engineering. Developers are facing security issues during the design and evolution of software. Analogously to the well known design patterns, so called securitypatterns were proposed to provide solutions to recurring softwaredesign problems, yet with the focus on security issues.Our projects aims at detecting and validating relevant securitypatterns in programs. We will develop a method and a supportingsemi-automated tool to better support security reviews. In order to identify relevant security patterns and further understand their role in software design and security audits, we will conduct studies with security experts and developers.