all InfoSec news
Tool-Supported Architecture-Based Data Flow Analysis for Confidentiality. (arXiv:2308.01645v1 [cs.SE])
cs.CR updates on arXiv.org arxiv.org
Through the increasing interconnection between various systems, the need for
confidential systems is increasing. Confidential systems share data only with
authorized entities. However, estimating the confidentiality of a system is
complex, and adjusting an already deployed software is costly. Thus, it is
helpful to have confidentiality analyses, which can estimate the
confidentiality already at design time. Based on an existing data-flow-based
confidentiality analysis concept, we reimplemented a data flow analysis as a
Java-based tool. The tool uses the software architecture …
analysis architecture confidential confidentiality data entities flow interconnection share software system systems tool