{"id":"https://openalex.org/W2176465394","doi":"https://doi.org/10.1109/models.2015.7338255","title":"SoSPa: A system of Security design Patterns for systematically engineering secure systems","display_name":"SoSPa: A system of Security design Patterns for systematically engineering secure systems","publication_year":2015,"publication_date":"2015-09-01","ids":{"openalex":"https://openalex.org/W2176465394","doi":"https://doi.org/10.1109/models.2015.7338255","mag":"2176465394"},"language":"en","primary_location":{"id":"doi:10.1109/models.2015.7338255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/models.2015.7338255","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems (MODELS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://lirias.kuleuven.be/handle/123456789/504259","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022261720","display_name":"Phu H. Nguyen","orcid":"https://orcid.org/0000-0003-1773-8581"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I2799829267","display_name":"Simula Research Laboratory","ror":"https://ror.org/00vn06n10","country_code":"NO","type":"facility","lineage":["https://openalex.org/I2799829267"]}],"countries":["LU","NO"],"is_corresponding":false,"raw_author_name":"Phu H. Nguyen","raw_affiliation_strings":["SSimula Research Laboratory, Fornebu, Norway","SnT-University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SSimula Research Laboratory, Fornebu, Norway","institution_ids":["https://openalex.org/I2799829267"]},{"raw_affiliation_string":"SnT-University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046846416","display_name":"Koen Yskout","orcid":"https://orcid.org/0000-0002-9192-9100"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Koen Yskout","raw_affiliation_strings":["Minds-DistriNet, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Minds-DistriNet, Leuven, Belgium","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041274593","display_name":"Thomas Heyman","orcid":"https://orcid.org/0000-0002-5760-0176"},"institutions":[{"id":"https://openalex.org/I66862912","display_name":"Chalmers University of Technology","ror":"https://ror.org/040wg7k59","country_code":"SE","type":"education","lineage":["https://openalex.org/I66862912"]},{"id":"https://openalex.org/I881427289","display_name":"University of Gothenburg","ror":"https://ror.org/01tm6cn81","country_code":"SE","type":"education","lineage":["https://openalex.org/I881427289"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Thomas Heyman","raw_affiliation_strings":["Chalmers & University of Gothenburg, Sweden"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chalmers & University of Gothenburg, Sweden","institution_ids":["https://openalex.org/I66862912","https://openalex.org/I881427289"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040326968","display_name":"Jacques Klein","orcid":"https://orcid.org/0000-0003-4052-475X"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Jacques Klein","raw_affiliation_strings":["SnT-University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SnT-University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012313708","display_name":"Riccardo Scandariato","orcid":"https://orcid.org/0000-0003-3591-7671"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Riccardo Scandariato","raw_affiliation_strings":["Minds-DistriNet, Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Minds-DistriNet, Leuven, Belgium","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040574362","display_name":"Yves Le Traon","orcid":"https://orcid.org/0000-0002-1045-4861"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yves Le Traon","raw_affiliation_strings":["SnT-University of Luxembourg, Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SnT-University of Luxembourg, Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"246","last_page":"255"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.7294734716415405},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7192045450210571},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.6863174438476562},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.6504024267196655},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.6341933608055115},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.5992822647094727},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5849835276603699},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.5733506679534912},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5687440037727356},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4976184666156769},{"id":"https://openalex.org/keywords/security-convergence","display_name":"Security convergence","score":0.49186062812805176},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.45013701915740967},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.42170393466949463},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.2568392753601074},{"id":"https://openalex.org/keywords/network-security-policy","display_name":"Network security policy","score":0.19934406876564026}],"concepts":[{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.7294734716415405},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7192045450210571},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.6863174438476562},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.6504024267196655},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.6341933608055115},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.5992822647094727},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5849835276603699},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.5733506679534912},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5687440037727356},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4976184666156769},{"id":"https://openalex.org/C52420254","wikidata":"https://www.wikidata.org/wiki/Q7445028","display_name":"Security convergence","level":5,"score":0.49186062812805176},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.45013701915740967},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.42170393466949463},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2568392753601074},{"id":"https://openalex.org/C117110713","wikidata":"https://www.wikidata.org/wiki/Q3394676","display_name":"Network security policy","level":4,"score":0.19934406876564026},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/models.2015.7338255","is_oa":false,"landing_page_url":"https://doi.org/10.1109/models.2015.7338255","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems (MODELS)","raw_type":"proceedings-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:123456789/504259","is_oa":true,"landing_page_url":"https://lirias.kuleuven.be/handle/123456789/504259","pdf_url":null,"source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Model Driven Engineering Languages and Systems (MODELS), Ottawa, Canada, 30 September - 2 October 2015","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:orbilu.uni.lu:10993/23027","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/23027","pdf_url":null,"source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings ACM/IEEE 18th International Conference on Model Driven Engineering Languages and Systems (2015-10); MODELS 2015, Ottawa, Canada [CA], from 26-09-2015 to 02-10-2015","raw_type":"http://purl.org/coar/resource_type/c_5794"},{"id":"pmh:oai:research.chalmers.se:241963","is_oa":false,"landing_page_url":"https://research.chalmers.se/en/publication/241963","pdf_url":null,"source":{"id":"https://openalex.org/S4306402469","display_name":"Chalmers Research (Chalmers University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66862912","host_organization_name":"Chalmers University of Technology","host_organization_lineage":["https://openalex.org/I66862912"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":null},{"id":"pmh:oai:tore.tuhh.de:11420/14857","is_oa":false,"landing_page_url":"http://hdl.handle.net/11420/14857","pdf_url":null,"source":{"id":"https://openalex.org/S4306401751","display_name":"tub.dok (Hamburg University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I884043246","host_organization_name":"Hamburg University of Technology","host_organization_lineage":["https://openalex.org/I884043246"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:lirias2repo.kuleuven.be:123456789/504259","is_oa":true,"landing_page_url":"https://lirias.kuleuven.be/handle/123456789/504259","pdf_url":null,"source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Model Driven Engineering Languages and Systems (MODELS), Ottawa, Canada, 30 September - 2 October 2015","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"score":0.4099999964237213,"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W171799331","https://openalex.org/W652748195","https://openalex.org/W1490630816","https://openalex.org/W1514888816","https://openalex.org/W1603839139","https://openalex.org/W1611279169","https://openalex.org/W1971320885","https://openalex.org/W1976766173","https://openalex.org/W2001822577","https://openalex.org/W2006108348","https://openalex.org/W2018644264","https://openalex.org/W2091625233","https://openalex.org/W2107581074","https://openalex.org/W2154849547","https://openalex.org/W2252272901","https://openalex.org/W2524476898","https://openalex.org/W4242704521","https://openalex.org/W6629311961","https://openalex.org/W6636066719","https://openalex.org/W6727764404"],"related_works":["https://openalex.org/W2299494954","https://openalex.org/W2552271940","https://openalex.org/W88610236","https://openalex.org/W2395987867","https://openalex.org/W2176465394","https://openalex.org/W2758682319","https://openalex.org/W2418642600","https://openalex.org/W2542633692","https://openalex.org/W2290724697","https://openalex.org/W2467594283"],"abstract_inverted_index":{"Model-Driven":[0],"Security":[1,63],"(MDS)":[2],"for":[3],"secure":[4],"systems":[5],"development":[6],"still":[7],"has":[8],"limitations":[9],"to":[10,79,115],"be":[11],"more":[12],"applicable":[13],"in":[14,89,130],"practice.":[15],"A":[16],"recent":[17],"systematic":[18],"review":[19],"of":[20,37,62,84,97,119],"MDS":[21,25,55],"shows":[22,125],"that":[23,86,126],"current":[24],"approaches":[26],"have":[27,46,134],"not":[28,47,98],"dealt":[29],"with":[30],"multiple":[31,43,92,127],"security":[32,38,44,69,93,101,118,128,141],"concerns":[33,45,129],"systematically.":[34],"Besides,":[35],"catalogs":[36],"patterns":[39,71,103],"which":[40],"can":[41],"address":[42],"been":[48,135],"applied":[49,113],"efficiently.":[50],"This":[51],"paper":[52],"presents":[53],"an":[54],"approach":[56],"based":[57],"on":[58],"a":[59,81,106],"unified":[60],"System":[61],"design":[64,70,102,116],"Patterns":[65],"(SoSPa).":[66],"In":[67],"SoSPa,":[68],"are":[72],"collected,":[73],"specified":[74],"as":[75],"reusable":[76],"aspect":[77],"models":[78],"form":[80],"coherent":[82],"system":[83],"them":[85],"guides":[87],"developers":[88],"systematically":[90,138],"addressing":[91],"concerns.":[94],"SoSPa":[95,114],"consists":[96],"only":[99],"interrelated":[100],"but":[104],"also":[105],"refinement":[107],"process":[108],"towards":[109],"their":[110],"application.":[111],"We":[112],"the":[117,131],"crisis":[120],"management":[121],"systems.":[122],"The":[123],"result":[124],"case":[132],"study":[133],"addressed":[136],"by":[137],"integrating":[139],"different":[140],"solutions.":[142]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}