A Methodology for Modeling and Analysis of Secure Systems Using Security Patterns and Mitigation Use Cases

Many approaches for modeling security requirements have been proposed, but software industry did not reach on an agreement on how to express security requirements in a system model or software architecture. The main objective of this perspective paper is to summarize the problem space of representation of security patterns when designing security requirements. Many security patterns are proposed in the literature to help the developers who lack expertise in security to implement it. Application of security patterns has been hindered by the fact that they lack directions for their implementation in a specific scenario. This paper presents a technique for using mitigation use cases for representing solution provided by security patterns. Different challenges and issues were identified related to the application of security patterns in industry.