A Generic Model for Assessing Multilevel Security-Critical Object-Oriented Programs

Abstract

The most promising approach for developing secure systems is the one which allows software developers to assess and compare the relative security of their programs based on their designs. Thereby, software metrics provide an easy approach for evaluating the security of certain object-oriented designs. They can also measure the impact on security that caused by modifications to existing programs. However, most studies in this area focus on a binary classification of data, either is classified or unclassified. In fact, there are other models with other classifications of data, for instance, the common model used by Defense departments that classifies data into four security levels. However, these various classifications have received little attention in terms of measuring their effect. This paper introduces a model for measuring information flow of security-critical data within a certain object-oriented program with multilevel classification of its security-critical data. It defines a set of object-oriented security metrics which are capable of assessing the security of a given program’s design from the point of view of potential information flow. These metrics can be used to compare the security of programs or assess the effect of program modifications on security. Specifically, this paper proposes a generic model that consists of several security metrics to measure the relative security of object-oriented designs with respect to design quality properties of accessibility, cohesion, coupling, and design size.

Authors and Affiliations

Bandar M. Alshammari

Keywords

Related Articles

Applications of Multi-criteria Decision Making in Software Engineering

Every complex problem now days require multicriteria decision making to get to the desired solution. Numerous Multi-criteria decision making (MCDM) approaches have evolved over recent time to accommodate various applicat...

 Dynamics of Mandelbrot set with Transcendental Function

 These days Mandelbrot set with transcendental function is an interesting area for mathematicians. New equations have been created for Mandelbrot set using trigonometric, logarithmic and exponential functions. Earli...

Implementation of Cooperative Spectrum Sensing Algorithm using Raspberry Pi

A novel cooperative spectrum sensing algorithm is implemented and analyzed using Raspberry Pi. In the proposed setup, Nokia cell phone is used as a spectrum sensing device while Raspberry Pi functions as a FC device to c...

Modeling the Cut-off Frequency of Acoustic Signal with an Adaptative Neuro-Fuzzy Inference System (ANFIS)

An Adaptative Neuro-Fuzzy Inference System (ANFIS), new flexible tool, is applied to predict the cut-off frequencies of the symmetric and the anti-symmetric circumferential waves (Si and Ai, i=1,2) propagating around an...

Denoising in Wavelet Domain Using Probabilistic Graphical Models

Denoising of real world images that are degraded by Gaussian noise is a long established problem in statistical signal processing. The existing models in time-frequency domain typically model the wavelet coefficients as...

Download PDF file
  • EP ID EP397095
  • DOI 10.14569/IJACSA.2016.071154
  • Views 77
  • Downloads 0

How To Cite

Bandar M. Alshammari (2016). A Generic Model for Assessing Multilevel Security-Critical Object-Oriented Programs. International Journal of Advanced Computer Science & Applications, 7(11), 419-427. https://europub.co.uk/articles/-A-397095