{"id":"https://openalex.org/W4234404260","doi":"https://doi.org/10.1145/1083200.1083203","title":"Towards an architectural treatment of software security","display_name":"Towards an architectural treatment of software security","publication_year":2005,"publication_date":"2005-01-01","ids":{"openalex":"https://openalex.org/W4234404260","doi":"https://doi.org/10.1145/1083200.1083203"},"language":"en","primary_location":{"id":"doi:10.1145/1083200.1083203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1083200.1083203","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 workshop on Software engineering for secure systems---building trustworthy applications  - SESS '05","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100720534","display_name":"Jie Ren","orcid":"https://orcid.org/0000-0001-9918-3000"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jie Ren","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023551978","display_name":"Richard J. K. Taylor","orcid":"https://orcid.org/0000-0002-5880-2490"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Taylor","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083024795","display_name":"Paul Dourish","orcid":"https://orcid.org/0000-0002-9203-0631"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Dourish","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079053119","display_name":"David Redmiles","orcid":"https://orcid.org/0000-0002-1370-7123"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Redmiles","raw_affiliation_strings":["University of California, Irvine, Irvine, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Irvine, Irvine, CA","institution_ids":["https://openalex.org/I204250578"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I204250578"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.797400951385498},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7257345914840698},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5488855242729187},{"id":"https://openalex.org/keywords/software-architecture","display_name":"Software architecture","score":0.544043779373169},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.49618345499038696},{"id":"https://openalex.org/keywords/architectural-pattern","display_name":"Architectural pattern","score":0.4817385971546173},{"id":"https://openalex.org/keywords/sherwood-applied-business-security-architecture","display_name":"Sherwood Applied Business Security Architecture","score":0.47201818227767944},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4610838294029236},{"id":"https://openalex.org/keywords/principal","display_name":"Principal (computer security)","score":0.45724889636039734},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.43515971302986145},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.40517887473106384},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.30359548330307007},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.2947218120098114},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.24453067779541016},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.18609651923179626},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11091741919517517}],"concepts":[{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.797400951385498},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7257345914840698},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5488855242729187},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.544043779373169},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.49618345499038696},{"id":"https://openalex.org/C72280835","wikidata":"https://www.wikidata.org/wiki/Q635346","display_name":"Architectural pattern","level":5,"score":0.4817385971546173},{"id":"https://openalex.org/C60172848","wikidata":"https://www.wikidata.org/wiki/Q7495506","display_name":"Sherwood Applied Business Security Architecture","level":5,"score":0.47201818227767944},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4610838294029236},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.45724889636039734},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.43515971302986145},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.40517887473106384},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.30359548330307007},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.2947218120098114},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.24453067779541016},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.18609651923179626},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11091741919517517},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1083200.1083203","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1083200.1083203","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 workshop on Software engineering for secure systems---building trustworthy applications  - SESS '05","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6299999952316284}],"awards":[],"funders":[{"id":"https://openalex.org/F4320307102","display_name":"Intel Corporation","ror":"https://ror.org/01ek73717"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2056412463","https://openalex.org/W1811024770","https://openalex.org/W942105934","https://openalex.org/W1548138051","https://openalex.org/W2222589037","https://openalex.org/W2037791655","https://openalex.org/W2784006287","https://openalex.org/W2343336663","https://openalex.org/W2134551179","https://openalex.org/W2479682920"],"abstract_inverted_index":{"Security":[0],"is":[1,103],"a":[2,28,38,95,104],"very":[3],"important":[4],"concern":[5],"for":[6,18,27],"software":[7,10,34,114],"architecture":[8,62,78],"and":[9,44,54,65,82,106],"components.":[11],"Previous":[12],"modeling":[13],"approaches":[14],"provide":[15,37],"insufficient":[16],"support":[17,66],"an":[19,77],"in-depth":[20],"treatment":[21,31,109],"of":[22,56,76,88,100,110],"security.":[23,46],"This":[24],"paper":[25],"argues":[26],"more":[29,107],"comprehensive":[30,108],"based":[32],"on":[33],"connectors.":[35,115],"Connectors":[36],"suitable":[39],"vehicle":[40],"to":[41],"model,":[42],"capture,":[43],"enforce":[45],"Our":[47],"approach":[48,69,91],"models":[49],"security":[50,74,112],"principal,":[51],"privilege,":[52],"trust,":[53],"context":[55],"architectural":[57,111],"constituents.":[58],"Extending":[59],"our":[60,68],"existing":[61],"description":[63],"language":[64],"tools,":[67],"can":[70],"facilitate":[71],"describing":[72],"the":[73],"characteristics":[75],"generating":[79],"enabling":[80],"infrastructure,":[81],"monitoring":[83],"run-time":[84],"conformance.":[85],"Initial":[86],"results":[87],"applying":[89],"this":[90,101],"are":[92],"illustrated":[93],"through":[94,113],"case":[96],"study.":[97],"The":[98],"contribution":[99],"research":[102],"deeper":[105]},"counts_by_year":[{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}