{"id":"https://openalex.org/W2998651993","doi":"https://doi.org/10.1145/1082983.1083203","title":"Towards an architectural treatment of software security","display_name":"Towards an architectural treatment of software security","publication_year":2005,"publication_date":"2005-05-15","ids":{"openalex":"https://openalex.org/W2998651993","doi":"https://doi.org/10.1145/1082983.1083203","mag":"2998651993"},"language":"en","primary_location":{"id":"doi:10.1145/1082983.1083203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1082983.1083203","pdf_url":null,"source":{"id":"https://openalex.org/S186921487","display_name":"ACM SIGSOFT Software Engineering Notes","issn_l":"0163-5948","issn":["0163-5948","1943-5843"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGSOFT Software Engineering Notes","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100720534","display_name":"Jie Ren","orcid":"https://orcid.org/0000-0001-9918-3000"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jie Ren","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023569183","display_name":"Richard G. Taylor","orcid":"https://orcid.org/0000-0002-9867-8033"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Taylor","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083024795","display_name":"Paul Dourish","orcid":"https://orcid.org/0000-0002-9203-0631"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Dourish","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079053119","display_name":"David Redmiles","orcid":"https://orcid.org/0000-0002-1370-7123"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Redmiles","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100720534"],"corresponding_institution_ids":["https://openalex.org/I204250578"],"apc_list":null,"apc_paid":null,"fwci":0.8775,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.82476278,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"30","issue":"4","first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.7925014495849609},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6888918876647949},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5543184876441956},{"id":"https://openalex.org/keywords/architectural-pattern","display_name":"Architectural pattern","score":0.5275080800056458},{"id":"https://openalex.org/keywords/software-architecture","display_name":"Software architecture","score":0.5148243308067322},{"id":"https://openalex.org/keywords/sherwood-applied-business-security-architecture","display_name":"Sherwood Applied Business Security Architecture","score":0.5011825561523438},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.4855036735534668},{"id":"https://openalex.org/keywords/principal","display_name":"Principal (computer security)","score":0.42829084396362305},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.4170920252799988},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4128759503364563},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.39831045269966125},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.3130533695220947},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3063594400882721},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.24402260780334473},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.16669145226478577},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1092582643032074}],"concepts":[{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.7925014495849609},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6888918876647949},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5543184876441956},{"id":"https://openalex.org/C72280835","wikidata":"https://www.wikidata.org/wiki/Q635346","display_name":"Architectural pattern","level":5,"score":0.5275080800056458},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.5148243308067322},{"id":"https://openalex.org/C60172848","wikidata":"https://www.wikidata.org/wiki/Q7495506","display_name":"Sherwood Applied Business Security Architecture","level":5,"score":0.5011825561523438},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4855036735534668},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.42829084396362305},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4170920252799988},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4128759503364563},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.39831045269966125},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.3130533695220947},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3063594400882721},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.24402260780334473},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.16669145226478577},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1092582643032074},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1082983.1083203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1082983.1083203","pdf_url":null,"source":{"id":"https://openalex.org/S186921487","display_name":"ACM SIGSOFT Software Engineering Notes","issn_l":"0163-5948","issn":["0163-5948","1943-5843"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGSOFT Software Engineering Notes","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6299999952316284,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1962970421","https://openalex.org/W1963507242","https://openalex.org/W1984644424","https://openalex.org/W1987302212","https://openalex.org/W2013658284","https://openalex.org/W2017378131","https://openalex.org/W2073781861","https://openalex.org/W2073785962","https://openalex.org/W2090780255","https://openalex.org/W2092726106","https://openalex.org/W2099137371","https://openalex.org/W2124736688","https://openalex.org/W2135670602","https://openalex.org/W2148336220","https://openalex.org/W2156437019","https://openalex.org/W2159256070","https://openalex.org/W2162366870","https://openalex.org/W2166602595","https://openalex.org/W3015463586"],"related_works":["https://openalex.org/W2388061732","https://openalex.org/W2114329470","https://openalex.org/W2134155536","https://openalex.org/W1577980470","https://openalex.org/W1548047792","https://openalex.org/W2998651993","https://openalex.org/W4234404260","https://openalex.org/W2049229947","https://openalex.org/W2169193101","https://openalex.org/W1910503282"],"abstract_inverted_index":{"Security":[0],"is":[1,103],"a":[2,28,38,95,104],"very":[3],"important":[4],"concern":[5],"for":[6,18,27],"software":[7,10,34,114],"architecture":[8,62,78],"and":[9,44,54,65,82,106],"components.":[11],"Previous":[12],"modeling":[13],"approaches":[14],"provide":[15,37],"insufficient":[16],"support":[17,66],"an":[19,77],"in-depth":[20],"treatment":[21,31,109],"of":[22,56,76,88,100,110],"security.":[23,46],"This":[24],"paper":[25],"argues":[26],"more":[29,107],"comprehensive":[30,108],"based":[32],"on":[33],"connectors.":[35,115],"Connectors":[36],"suitable":[39],"vehicle":[40],"to":[41],"model,":[42],"capture,":[43],"enforce":[45],"Our":[47],"approach":[48,69,91],"models":[49],"security":[50,74,112],"principal,":[51],"privilege,":[52],"trust,":[53],"context":[55],"architectural":[57,111],"constituents.":[58],"Extending":[59],"our":[60,68],"existing":[61],"description":[63],"language":[64],"tools,":[67],"can":[70],"facilitate":[71],"describing":[72],"the":[73],"characteristics":[75],"generating":[79],"enabling":[80],"infrastructure,":[81],"monitoring":[83],"run-time":[84],"conformance.":[85],"Initial":[86],"results":[87],"applying":[89],"this":[90,101],"are":[92],"illustrated":[93],"through":[94,113],"case":[96],"study.":[97],"The":[98],"contribution":[99],"research":[102],"deeper":[105]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}