Do security patterns really help designers?

Koen Yskout, Riccardo Scandariato, Wouter Joosen

2023tub.dok (Hamburg University of Technology)37 citations

Abstract

Security patterns are well-known solutions to security-specific problems. They are often claimed to benefit designers without much security expertise. We have performed an empirical study to investigate whether the usage of security patterns by such an audience leads to a more secure design, or to an increased productivity of the designers. Our study involved 32 teams of master students enrolled in a course on software architecture, working on the design of a realisticallysized banking system. Irrespective of whether the teams were using security patterns, we have not been able to detect a difference between the two treatment groups. However, the teams prefer to work with the support of security patterns.

Topics & Concepts

Computer scienceSoftware security assuranceComputer securityProductivityWork (physics)Security engineeringSecurity through obscuritySecurity serviceSecurity information and event managementComputer security modelCloud computing securityInformation securityEngineeringCloud computingEconomicsOperating systemMacroeconomicsMechanical engineeringInformation and Cyber SecurityAdvanced Malware Detection TechniquesSoftware Engineering Research