Security Patterns in Practice: Designing Secure Architectures Using Software Patterns

Glossary

A & A

Authorization and access control. Authorization defines permitted access to resources depending on the accessor (user, executing process), the resource being accessed and the intended use of the resource. Access control defines a mechanism to enforce authorization.

AAL

Ambient assisted living. Architectures for home environments which have devices such as sensors and cameras to support and monitor people with impaired functions or disabilities.

Access matrix

An authorization model which indicates, for each active entity (a subject) which resources it can access (objects or protection objects), and how (access type).

ACL

Access control list. Associated with an object to indicate which subjects can access it and in what way.

Analysis stage

The stage of the software lifecycle at which requirements are made precise.

Antipattern

A pattern that illustrates practices that should be avoided.

API

Application programming interface. Defines a protocol that processes should use to access services or to communicate with each other.

Authentication

Proof to the system that the subject intending to access the system is who or what it says it is. See I&A.

Authorization

See A&A.

Bastion host

A special-purpose computer on a network point of access designed to withstand attacks.

Brief

A formal document that sets forth the main contentions with supporting statements or evidence.

Class diagram

A type of UML diagram that shows static relationships between entities (represented by classes). ...