Ontology Based Patterns for Software Security Engineering

Software security engineering requires an understanding of the security issues and knowledge about how to solve these issues. Unfortunately, the engineers often lack knowledge in security field, which induces security risks in software systems. To minimize the risks and support engineers during system development, structured and reusable information in security area is required. To this objective, security process and security patterns for software development are proposed. Moreover, the design of the security patterns is based on ontology techniques, which can provide structured information that can be reused and combined. For searching and mapping of patterns, we use agents in multi-agent system. The presented approach can enhance understanding of security issues and support implementation of security in software engineering process.