Security Concerns of Object Oriented Software Architectures

Abstract

Testing and measuring the security of software system architectures is a difficult task. An attempt is made in this paper to analyze the issues of architecture security of object-oriented software’s using common security concepts to evaluate the security of a system under design. Object oriented systems are based on various architectures like COM, DCOM, CORBA, MVC and Broker. In object oriented technology the basic system component is an object. Individual system component is posing it own risk in the system. Security policies and the associated risk in these software architectures can be calculated for the individual component. Overall risk can be calculated based on the context and risk factors in the architecture. Small risk factors get accumulated together and form a major risk in the systems and can damage the systems.

References

• Dinesh Kumar Saini, Lingaraj A. Hadimani and Nirmal Gupta “Software Testing Approach for Detection and Correction of Design Defects in Object Oriented Software” Journal of Computing, Volume 3, Issue 4, April 2011, ISSN 2151-9617, Page No. 44-50.
• R. Allen, D. Garlan, “A Formal Basis for Architectural Connection” ACM Trans. Software. Engineering. Methodology, 1997. 6(3): pp. 213-249
• D. Garlan and M. Shaw, “An introduction to software architecture”, Advances in Software Engineering and Knowledge Engineering, edited by V. Ambriola and G. Tortora, World Scientific Publishing Company, 1993.
• D. Gelperin, B.Hetzel,"The growth of software testing" Commun. ACM 31(6), Jun. 1988, pp.687-695
• G. McGraw, "Managing Software Security Risks", IEEE Computer, 35(4), March 2002, pp. 99–101.
• Dinesh Kumar Saini and Hemraj Saini “Proactive Cyber Defense and Reconfigurable Framework for Cyber Security” International Review on computer and Software (IRCOS) Vol.2. No.2. March 2007, Pages 89-98. ITALY
• M. Shaw, R. DeLine, D.V. Klein, T.L. Ross, D.M. Young, G. Zelesnik, "Abstractions for Software Architecture and Tools to Support Them", IEEE Transactions on Sqftware Engineering, 21(4), April 1995, pp.314-335.
• K.S.Hoo, J.W.Sudbury, J.R.Jaquith,“Tangible ROI Through Secure Software Engineering”, Secure Business Quarterly: Special Issue on Return on Security Investment, 1(2), A publication of @stake, 2001.
• D.Verdon, G.McGraw, "Risk Analysis in Software Design", IEEE Security & Privacy, July/August 2004, pp.32-37.
• Dinesh Kumar Saini and Nirmal Gupta “Fault Detection Effectiveness in GUI Components of Java Environment through Smoke Test”, Journal of Information Technology, ISSN 0973-2896 Vol.3, issue3, 7-17 September 2007.
• H.Y.Chen, "The design and implementation of a prototype for data flow analysis at the methodlevel of object-oriented testing", Proceedings of the 2002 IEEE International Conference on Systems, Man, and Cybernetics (SMC 2002), IEEE Computer Society Press, Los Alamitos, California, 2002, pages 140–145.
• Dinesh Kumar Saini and Nirmal Gupta “Class Level Test Case Generation in Object Oriented Software Testing, International Journal of Information Technology and Web Engineering, (IJITWE) Vol. 3, Issue 2, pp. 19-26 pages, march 2008. USA
• Dinesh Kumar Saini and Hemraj Saini "VAIN: A Stochastic Model for Dynamics of Malicious Objects", the ICFAI Journal of Systems Management, Vol.6, No1, pp. 14- 28, February 2008. INDIA
• Hemraj Saini and Dinesh Kumar Saini "Malicious Object dynamics in the presence of Anti Malicious Software” European Journal of Scientific Research ISSN 1450-216X Vol.18 No.3 (2007), pp.491-499 © Euro Journals Publishing, Inc. 2007 http://www.eurojournals.com/ejsr.htm EUROPE
• P.C.Jorgensen and C.Erickson, "Object-oriented integration testing", Commun. ACM, 37(9), Sep. 1994, pp.30-38.
• M.Kolling,J.Rosenberg,"Support for object-oriented testing", Proceedings of the Technology of Object-Oriented Languages and systems, 23-26 Nov. 1998, IEEE Computer Society, Washington, pp.204 - 215.
• Y.M. Wang, O.P. Damani, and W.J. Lee,"Reliability and Availability Issues in Distributed Component Object Model (DCOM)", Proceedings of International Workshop on Community Networking", May 1997, IEEE Computer Society, Washington, pp.59-63.
• F.J.Hauck, R.Kapitza, H.P.Reiser, A.I.Schmied,"A flexible and extensible object middleware: CORBA and beyond", Proceedings of the 5th international Workshop on Software Engineering and Middleware (Lisbon, Portugal, September 05-06,2005), ACM Press, New York, NY, pp.69-75.
• M.Veit, S.Herrmann,"Model-view-controller and object teams: a perfect match of paradigms", Proceedings of the 2nd international Conference on Aspect-Oriented Software Development (Boston, Massachusetts, March 17 - 21, 2003), ACM Press, New York, NY, pp.140-149.
• L.Rosenberg, R.Stapko, A. Gallo,"Risk-based object oriented testing", Twenty-Fourth Annual Software Engineering Workshop, NASA, Software Engineering Laboratory, December 1999.
• T.M.Khoshgoftaar, E.B.Allen, W.D.Jones, J.P.Hudepohl,"Cost-Benefit Analysis of Software Quality Models", Software Quality Control 9(1) (Jan. 2001),Kluwer Academic Publishers, Manufactured in The Netherlands, pp.9-30.
• S.A.Butler,"Security attribute evaluation method: a cost-benefit approach", Proceedings of the 24rd International Conference on Software Engineering, ICSE 2002, IEEE Computer Society, Washington, pp.232-240.
• Dinesh Kumar Saini, Jabar H. Yousif, and Wail M. Omar “Enhanced Inquiry Method for Malicious Object Identification” ACM SIGSOFT Volume 34 Number 3 May 2009, ISSN: 0163-5948, USA.
• Wail M.Omar, Dinesh K. Saini and Mustafa Hassan “Credibility Of Digital Content in a Healthcare Collaborative Community” Software Tools and Algorithms for Biological Systems in book series "Advances in Experimental Medicine and Biology, AEMB" Springer, Volume 696, Part 8, Page No. 717-724, DOI: 10.1007/978-1-4419-7046-6_73,
• Dinesh Kumar Saini “Sense the Future” Campus Volume 1- Issue 11, Page No14-17, February 2011.
• Dinesh Kumar Saini and Moinuddin Ahmad “Modeling of Object Oriented Software Testing Cost” The 2011 International Conference on Software Engineering Research and Practice (SERP'11), World Congress in computer Science and Engineering, July 18-21, 2011, Las Vegas, USA. Pp. 333-339.
• Dinesh Kumar Saini and Moinuddin Ahmad “Enhanced Software Quality Economics for Defect Detection Techniques Using Failure Prediction” The 2011 International Conference on Software Engineering Research and Practice (SERP'11) World Congress in computer Science and Engineering July 18-21, 2011, Las Vegas, USA, PP. 346-351.
• Nr.Mead, V.Viswanathen, Deepa, et.al “Incorporating Security Quality Requirements Engineering (SQUARE) to Standard Life-Cycle Models, Technical notes CMU, 2008.
• S L Saini, Dinesh Kumar Saini, and Jabar H. Yousif “Cloud Computing and Enterprise Resource Planning Systems” The 2011 International Conference of Manufacturing Engineering and Engineering Management (ICMEEM-2011), World Congress in Engineering, July 6-9th London UK, PP.681-686.
• Dinesh Kumar Saini and Raj Kumar Somani “Malicious objects propagation dynamics in the network”, International Conference on Emerging Trends in Networks and Computer Communications (ETNCC), 2011, Digital Object Identifier: 10.1109/ETNCC.2011.5958484, Publication Year: 2011 , Page(s): 47 – 51.
• Dinesh Kumar Saini, Lingaraj A Hadimani, Poonam V Vaidya and Sanad Al Maskari “Software Quality Model Six Sigma Initiatives” The 2011 International Conference of Computer Science and Engineering (ICCSE-2011), World Congress in Engineering, July 6-9th London UK, PP. 1226-1231.
• Dinesh Kumar Saini, Nebras N. Hasoon, Feras N. Hasoon and Mustafa Hasan. “Review of Query Processing in Distributed Systems”, Proceedings of the INFORMATICS 2011 IADIS, International Association for Development of the Information Society, July 20-26, 2011, Rome Italy. Pp 117-123
• Dinesh Kumar Saini, Sanad Al Maskari, R G Dabhade, Sandhya V Khandage and Lingaraj A. Hadimani “Broker Architecture for Quality of Service” The 2011 International Conference of Information Security and Internet Engineering, (ICISIE-2011), World Congress in Engineering, July 6-9th London UK, PP 484-490.
• Lingaraj A. Hadimani, Dinesh Kumar Saini, Vaishali P Khoche and Sanad Al Maskari, “Comparison of Software and Hardware Design Tools (CASE vs. Simulators)” The 2011 International Conference of Manufacturing Engineering and Engineering Management, (ICMEEM-2011), World Congress in Engineering, July 6-9th London UK
• Sanad Al Maskari, Dinesh Kumar Saini, Swati Y Raut and Lingraj A Hadimani, “Security and Vulnerability Issues in University Networks” The 2011 International Conference of Information Security and Internet Engineering (ICISIE-2011) World Congress in Engineering, July 6-9th London UK
• Jabar H.Yousif, Dinesh Kumar Saini and Hassan S. Uraibi, “Artificial Intelligence in E-Leaning-Pedagogical and Cognitive Aspects” The 2011 International Conference of Computational Intelligence and Intelligent Systems (ICCIIS-201), World Congress in Engineering, July 6-9th London UK
• Nitin B Raut, Jabar H. Yousif, Sanad Al Maskari, and Dinesh Kumar Saini “Cloud for Pollution Control and Global Warming” The 2011 International Conference of Information Engineering (ICIE-2011), World Congress in Engineering, July 6-9th London UK
• Dinesh Kumar Saini, N.Hasson, F.Hasson, Mustafa Hassan, “Review of Query Processing in Distributed Systems” Informmatics-2011, IADIS International Conference Italy July 21-26 , 2011.
• N.Hasson, F.Hasson, Dinesh Kumar Saini, “Generic Framework for Monitoring Air Pollution in Sohar Industrial Region”, ICT, Society and Human Being-2011, IADIS International Conference Italy July 21-26, 2011.
• Dinesh Kumar Saini, Sanad Al Maskari and Hemraj Saini, “Malicious Object Trafficking in the Network” IEEE IDCTA-2011, Korea, August 13-16, 201.
• Dinesh Kumar Saini, Sanad Al Maskari and Lingraj Hadimani “Mathematical Modeling of Software Reusability” 3rd IEEE International Conference on Machine Learning and Computing (ICMLC,2011)Singapore, February 26-28, 2011, IEEEXplore, 978-1-4244-9253-4/11.
• 40. Dinesh Kumar Saini, Wail M. Omar “Software Testing For Semantic Service Oriented Architecture for E-Health Software Services” SERP’10 - 9th international Conference on Software Engineering Research and Practice (USA) http://www.world-academy-of-science.org/, P.No. 240-246
• Dinesh Kumar Saini, Osama Abu Rahmeh, H. Saini, Wail M. Omar “Extended Secure Architecture of HIS: HL7” BIOCOMP'10 - 11th International Conference on Bioinformatics and Computational Biology (July 12-15, 2010, USA) http://www.world-academy-of-science.org, P.No. 617-623.
• Dinesh Kumar Saini and Hemraj Saini "Achieving Quality Through Testing Polymorphism in Object Oriented Systems,"3rd International Conference on Quality, Reliability and INFOCOM Technology (Trends and Future Directions), 2-4 December, 2006, Indian National Sciences and Academics, New Delhi (India). Conference proceeding.
• Dinesh Kumar Saini and Hemraj Saini “Static Code Analysis”, NSCOMCS-2005 Proceeding of National Seminar on Mathematics and Computer Science sponsored by UGC.
• Dinesh Kumar Saini and Hemraj Saini “Identification and characterization of software testing process for object oriented systems”, National Conference on Mathematical Analysis and its Applications in Real -World Problems, Berhampur University, September
• Dinesh Kumar Saini and Hemraj Saini “Software Metrics and Mathematical Models in the Software Development Environment for Improving its Quality”, National Conference on Mathematical Modeling, BITS Pilani, Oct.2005
• Dinesh Kumar Saini and Hemraj Saini “Analytical Study of Mathematical Models For Software Reusability Metrics in Software Development Environment” National Conference on Mathematical Modeling and Analysis – October 2004.
• Dinesh Kumar Saini and Hemraj Saini “Statistical Modeling of Extensibility in software” 3rd International Conference on Quality, Reliability and INFOCOM Technology (Trends and Future Directions), 2-4 December, 2006, Indian National Sciences and Academics, New Delhi (India). ISBN 81–7446–434–4 Conference proceeding.
• Dinesh Kumar Saini, Lakshmi Sunil Prakash and Wail M Omar “Review of Technological Challenges in Web - Based Learning Content Management Systems (LCMS) with special emphasis on extraction of Learning Contents” International Symposium, College of Applied Science, Ministry of Higher Education, April 13-16, 2010, Oman, P.No. 43-49.

Index Terms

Keywords