期刊名称:International Journal of Computer Science and Network Security
印刷版ISSN:1738-7906
出版年度:2006
卷号:6
期号:2B
页码:139-139~146
出版社:International Journal of Computer Science and Network Security
摘要:Security patterns are a recent development as a way to encapsulate the accumulated knowledge about secure systems design, and security patterns are also intended to be used and understood by developers who are not security professionals. In this paper, we will compare several security patterns to be used when dealing with application security, following an approach that we consider important for measuring the security degree of the patterns, and indicating a fulfilment or not of the properties and attributes common to all security systems. We will see that these patterns present some weaknesses. Although they fulfil the design original intention, they don’t fulfil many security attributes.