Recognition and validation of security patterns

• Applicants: Professor Dr. Rainer Koschke; Privatdozent Dr. Karsten Sohr
• Subject Area: Software Engineering and Programming Languages
• Term: from 2015 to 2021
• Project identifier: Deutsche Forschungsgemeinschaft (DFG) - Project number 269496544

Information security is increasingly gaining importance in software engineering. Developers are facing security issues during the design and evolution of software. Analogously to the well known design patterns, so called securitypatterns were proposed to provide solutions to recurring softwaredesign problems, yet with the focus on security issues.Our projects aims at detecting and validating relevant securitypatterns in programs. We will develop a method and a supportingsemi-automated tool to better support security reviews. In order to identify relevant security patterns and further understand their role in software design and security audits, we will conduct studies with security experts and developers.

• DFG Programme: Research Grants