Aspect-Oriented Requirements Analysis.
Improve the modularization of these cross-cutting concerns using aspect-orientation.
Specurity Aspects
Name
Description
Verification of the identity of entities involved in a communication
Mechanisms to ensure that the message is not corrupted between the moment it leaves the sender and the moment it reaches the receiver.
Mechanisms to ensure that identification is achieved within a certain period of time.
Specification Elements
Name
Description
Intercepts requests and starts a dialog with the corresponding AuthenticationReceive to ensure authenticity.
Intercepts requests and starts a dialog with the corresponding AuthenticationSend to ensure authenticity.
These components intercept the messages whose Integrity must be ensured and they dialogue according to a certain integrity algorithm.
Guarantee that the component is implemented in such a way that that restriction is guaranteed
Security Aspects
Authenticity
Verification of the identity of entities involved in a communication- Specification Elements:
- AuthenticationReceive
- AuthenticationSend
- Threats:
- Spoofing
Integrity
Mechanisms to ensure that the message is not corrupted between the moment it leaves the sender and the moment it reaches the receiver.- Specification Elements:
- IntegrityHandler
- Threats:
- Tampering with Data
Response time
Mechanisms to ensure that identification is achieved within a certain period of time.- Specification Elements:
- TimeConstraint
- Threats:
- Denial of Service
Specification Elements
AuthenticationSend
Intercepts requests and starts a dialog with the corresponding AuthenticationReceive to ensure authenticity.- Applies to:
- Component
AuthenticationReceive
Intercepts requests and starts a dialog with the corresponding AuthenticationSend to ensure authenticity.- Applies to:
- Component
IntegrityHandler
These components intercept the messages whose Integrity must be ensured and they dialogue according to a certain integrity algorithm.- Applies to:
- Component
TimeConstraint
Guarantee that the component is implemented in such a way that that restriction is guaranteed- Applies to:
- Data