An Extensible Framework for Architecture-Based Data Flow Analysis for Information Security

arXiv:2403.09402v1 Announce Type: cross
Abstract: The growing interconnection between software systems increases the need for security already at design time. Security-related properties like confidentiality are often analyzed based on data flow diagrams (DFDs). However, manually analyzing DFDs of large software systems is bothersome and error-prone, and adjusting an already deployed software is costly. Additionally, closed analysis ecosystems limit the reuse of modeled information and impede comprehensive statements about a system's security. In this paper, we present an open and extensible …

analysis architecture arxiv confidentiality cs.cr cs.se data design error flow framework information information security interconnection large security software software systems systems