Home > Publications > Reports > Informatics (CW)


CW 575

Koen Buyens, Riccardo Scandariato, Wouter Joosen
Automated detection and resolution of least privilege violations in software architectures

Abstract

Supporting security principles, like least privilege, in a software architecture is difficult due to the lack of both a sound theory and effective secure software engineering practices. As a result, principles are often neglected by practitioners, resulting in potentially high risk threats to systems.

This paper improves the understanding and the support for least privilege in software architectures by (i) defining the foundations to identify potential violations of the principle herein and (ii) providing architectural transformations that can be used to improve the security properties of an architecture, in an automated way. These results have been implemented and validated in a case study.

report.pdf (583K) / mailto: K. Buyens