A quantitative and knowledge–based approach to choosing security architectural tactics. (6th March 2015)

• Record Type: Journal Article
• Authors: Kim, Suntae
• Is Part Of: International journal of ad hoc and ubiquitous computing. Volume 18:Number 1/2(2015)
• Page Start: 45
• Page End: 53
• Publication Date: 2015-03-06
• Subjects: security architectural tactics -- secure software architecture -- quantitative tactic selection -- architectural tactic knowledge base -- software quality -- metamodelling -- RBML -- feature modelling -- non–functional requirements -- NFRs -- analytical hierarchy process -- AHP -- sensitivity analysis -- online trading systems; Ubiquitous computing -- Periodicals; Embedded computer systems -- Periodicals; Electronic data processing -- Distributed processing -- Periodicals; Wireless communication systems -- Periodicals; Computer architecture -- Periodicals; 004.2
• Languages: English
• ISSNs: 1743-8225

Abstract

This paper presents a quantitative approach to choosing security architectural tactics using architectural tactic knowledge base. An architectural tactic is an architectural design building block pertaining to a software quality. The tactic knowledge base is a tactic repository composing of architectural tactic specifications defined in role based metamodelling language (RBML) and their relationships expressed in a feature model. In this paper, a cost of an architectural tactic is estimated by using the use case points method, and a level of tactic contribution for non–functional requirements (NFRs) is predicted by the analytic hierarchy process (AHP) and sensitivity analysis. Then, the proposed approach suggests the best possible fit which is likely to satisfy NFRs. We applied the approach to choosing security architectural tactics for building software architecture of an online trading system.