architectural-data-flow-analysis-for-detecting-violations-of-confidentiality-requirements.pdf

Software vendors must consider confidentiality especially while creating software architectures because decisions made here are hard to change later. Our approach represents and analyzes data flows in software architectures. Systems specify data flows and confidentiality requirements specify limitat...

Full description

Bibliographic Details
Language:English
Published: KIT Scientific Publishing 2022
Online Access:https://doi.org/10.5445/KSP/1000151563
Description
Summary:Software vendors must consider confidentiality especially while creating software architectures because decisions made here are hard to change later. Our approach represents and analyzes data flows in software architectures. Systems specify data flows and confidentiality requirements specify limitations of data flows. Software architects use detected violations of these limitations to improve the system. We demonstrate how to integrate our approach into existing development processes.