Now showing1 - 1 of 1
  • Some of the metrics are blocked by your 
    Item type:Publication,
    Composition of least privilege analysis results in software architectures
    (Association for Computing Machinery (ACM), 2011-05) ; ;
    Security principles are often neglected by software architects, due to the lack of precise definitions. This results in potentially high-risk threats to systems. Our own previous work tackled this by introducing formal foundations for the least privilege (LP) principle in software architectures and providing a technique to identify violations to this principle. This work shows that this technique can scale by composing the results obtained from the analysis of the sub-parts of a larger system. The technique decomposes the system into independently described subsystems and a description listing the interactions between these subsystems. These descriptions are thence analyzed to obtain LP violations and subsequently composed to obtain the violations of the overall system.
    Publicationtype: Conference Paper
      11