Best Paper Award for Koen Buyens
ARES, Fukuoka, Japan, March 2009.
Koen Buyens was awarded the 'Best Paper Award' (pdf) from ARES, the International Conference on Availability, Security and Reliability.
The implementation of security principles, like least privilege, in a software architecture is difficult, as no systematic rules on how to apply them in practice exist. As a result, they are often neglected, which lowers the overall security level of the software system and increases the cost to fix this later on.
This paper improves the support for least privilege in software architectures by (i) defining the foundations to identify potential violations of the principle herein and (ii) eliciting architectural transformations that ameliorate the security properties of the architecture. These results have been implemented and validated in three case studies.
