CoChat
Sign Up
Cited by 22Advanced Software Engineering MethodologiesSecurity and Verification in ComputingInformation and Cyber Security

The DOI matches its Crossref record.

A scenario-based framework for the security evaluation of software architecture

Alkussayer, Abdulaziz, Allen, William H.·2010·2010 3rd International Conference on Computer Science and Information Technology
DOI 10.1109/iccsit.2010.5564015
Open this paper in CoChat — free account

Abstract

Software security has become a crucial component of software systems in today's market. However, software security development is still a maturing process. In this paper, we present an approach for assessing software architecture to determine how well it can satisfy intended security requirements. It is important to be able to assess the security of software under development at an early stage (e.g., the design stage). By doing so we are not only reducing the probability that flaws will be introduced and ensuring that stakeholder requirements have been met, but also focusing on a stage where changes will cost just a fraction of what they would cost in later stages (e.g. implementation). This paper reports on the ongoing development of a systematic security evaluation framework that aids in assessing the level of security supported by a given architecture and provides the ability to qualitatively compare multiple architectures with respect to their security support.

Overview

Integrity signals

Registry

Crossref · 10.1109/iccsit.2010.5564015

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Citations

Cites

No references could be resolved yet.

Research works printed but not linked: 23

  1. clements, 2002, Evaluating Software Architectures Methods and Case Studies
  2. 10.2201/NiiPi.2008.5.5 · DOI
  3. schumacher, 2006, Security Patterns Integrating Security and Systems Engineering
  4. 10.1109/SESS.2007.4 · DOI
  5. steel, 2005, Core Security Patterns Best Practices and Strategies for 12EE Web Services and Identity Management
  6. swiderski, 2004, Threat Modeling
  7. 10.1145/1137627.1137634 · DOI
  8. 10.1145/1083200.1083214 · DOI
  9. yskout, 2006, An inventory of security patterns, Katholieke Universiteit de Leuven Tech Rep
  10. mead, 2008, Incorporating security quality requirements engineering (SQUARE) into standard life-cycle models, tech rep CMU/SEI-2008- TN-006
  11. folmer, 2003, Scenario-based assessment of software architecture usability, Proceedings of Workshop on Bridging the Gaps Between Software Engineering and Human-Computer Interaction ICSE
  12. 10.1109/APSCC.2008.17 · DOI
  13. kazman, 2000, ATAM: Method for architecture evaluation, tech rep CMU/SEI-2000- TR-004
  14. 10.1109/TDSC.2007.70240 · DOI
  15. 10.1109/MC.2009.233 · DOI · Paper page
  16. ionita, 2002, Scenario based software architecture evaluation methods: An overview, SARA workshop at ICSE
  17. 10.1109/ICSE.1994.296768 · DOI
  18. bosch, 2000, Design and Use of Software Architectures Adopting and Evolving a Product-line App roach
  19. rozanski, 2005, Software systems architecture Working with stakeholders using viewpoints and perspectives
  20. 10.1109/MS.2007.114 · DOI
  21. hoglund, 2004, Exploiting Software How to Break Code
  22. potter, 2005, Software security testing, Software Development, 2, 81
  23. howard, 2003, Writing Secure Code

Cited by

See all 22

Metadata

Authors
Alkussayer, A., & Allen, W. H.
Affiliations
Florida Institute of Technology (US)
ORCID
Allen, William H.
Venue
2010 3rd International Conference on Computer Science and Information Technology
Publisher
IEEE
Published
2010-07
Volume
5
Pages
687-695
DOI
10.1109/iccsit.2010.5564015
OpenAlex
W2002095915
Cited by
22
References
0
Citations by year
2025: 2 · 2023: 1 · 2020: 1 · 2019: 1 · 2017: 3 · 2015: 5 · 2014: 3 · 2013: 3 · 2012: 1
FWCI
1.55
Type
conference paper
Language
en
Open access
closed
Locations
International Conference on Computer Science and Information Technology
Topics
  • Physical Sciences › Computer Science › Software › Advanced Software Engineering Methodologies
  • Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
Keywords
security analysis, security requirements, architectural comparison

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: A scenario-based framework for the security evaluation of software architecture. https://app.cochat.ai/papers/10.1109/iccsit.2010.5564015
The paper
Alkussayer, A., & Allen, W. H. (2010). A scenario-based framework for the security evaluation of software architecture. 2010 3rd International Conference on Computer Science and Information Technology. https://doi.org/10.1109/iccsit.2010.5564015