Bearbeite Vortrag: Architecture-based Uncertainty Impact Analysis for Confidentiality

Du bist aus dem folgenden Grund nicht berechtigt, die Seite zu bearbeiten:

Fehlende Berechtigung Bitte melde Dich mit Deinen KIT-Zugangsdaten an. Falls Du trotz Anmeldung diese Seite siehst, bitte eine/-n Wissensmanager/-in darum, Dich zur richtigen Gruppe hinzuzufügen.

Titel:	Architecture-based Uncertainty Impact Analysis for Confidentiality	Zum ändern des Titels bitte anklicken und die Seite verschieben.
Vortragende(r):
E-Mail Vortragende(r):		Bitte beachten Sie: Durch den Eintrag hier wird die E-Mail-Adresse des/der Vortragenden öffentlich sichtbar. Daher bitte die KIT-Adresse verwenden.
Vortragssprache:
Vortragstyp:
Betreuer(in):		Falls ein Betreuer noch nicht in dieser Liste vorhanden ist, bitte auf der Seite Betreuer hinzufügen und dieses Formular neu laden.
Termin:
Vortragsmodus:
Kurzfassung:	In times of highly interconnected systems, confidentiality becomes a crucial security quality attribute. As fixing confidentiality breaches becomes costly the later they are found, software architects should address confidentiality early in the design time. During the architectural design process, software architects take Architectural Design Decisions (ADDs) to handle the degrees of freedom, i.e. uncertainty. However, ADDs are often subjected to assumptions and unknown or imprecise information. Assumptions may turn out to be wrong so they have to be revised which re-introduces uncertainty. Thus, the presence of uncertainty at design time prevents from drawing precise conclusions about the confidentiality of the system. It is, therefore, necessary to assess the impact of uncertainties at the architectural level before making a statement about confidentiality. To address this, we make the following contributions: First, we propose a novel uncertainty categorization approach to assess the impact of uncertainties in software architectures. Based on that, we provide an uncertainty template that enables software architects to structurally derive types of uncertainties and their impact on architectural element types for a domain of interest. Second, we provide an Uncertainty Impact Analysis (UIA) that enables software architects to specify which architectural elements are directly affected by uncertainties. Based on structural propagation rules, the tool automatically derives further architectural elements which are potentially affected. Using the large-scale open-source contract tracing application called Corona Warn App (CWA) as a case study, we show that the UIA achieves 100% recall while maintaining 44%-91% precision when analyzing the impact of uncertainties on architectural elements.	Bitte maximal 150 Wörter verwenden.

Diese Seite beobachten

Abbrechen