A SECURITY DESIGN PATTERN TAXONOMY BASED ON ATTACK PATTERNS - Findings of a Systematic Literature Review

Abstract

Department of Business Informatics - Software Engineering, Johannes Kepler University of Linz, Altenbergerstrasse 69, Linz, Austriaandreas.wiesauer@jku.at, johannes.sametinger@jku.atKeywords: security design pattern taxonomy, security design patterns, attack patterns, literature reviewAbstract: Security design patterns are proven solutions to security problems in a given context with constructive mea-sures of how to design certain parts of a software system. The literature contains numerous definitions, ex-amples, and taxonomies of such patterns. There are also a few quality criteria for them. We suggest a newtaxonomy based on attack patterns in order to enhance applicability of security design patterns especially fornon-experts in software security. We further suggest a combined consideration of attack patterns, securitydesign patterns and test cases for the validation and evaluation of security design patterns.