Security in software architecture: a case study

The idea of ensuring that nonfunctional requirements such as maintainability, performance, reusability, reliability, and others are designed and built in to new software is not a new one. However, software security as a particular nonfunctional requirement of software systems is all too often addressed late in the software development process. As a result, the security of such software systems is poor and can lead to security compromises (such as theft of service or information), increased costs in maintaining the software, and many indirect costs such as system downtime, loss of productivity, etc. This paper survey existing research into architecting and engineering security and present this material along with a case study of Daniel J. Bernstein's qmail Internet mail server software.