Design Tactics - Security
Design tactics, based on the book 'Software Architecture in Practice' by Len Bass et al.
= 12 items
(filtered by ) / - Resisting AttacksNonrepudiation, confidentiality, integrity, and assurance.
- Authenticate UsersEnsure that a user or remote computer is actually who it purports to be.
- Authorize UsersEnsure that an authenticated user has the rights to access and modify either data or services.
- Maintain Data ConfidentialityApply encryption to data and to communication links.
- Maintain IntegrityUse redundant information, such as checksums or hash results, to ensure that data are delivered as intended.
- Limit ExposureDesign systesm sot that limited services are available on each host.
- Limit AccessRestrict access based on message source or destination port.
- Detecting AttacksDetect attacks and act.
- Intrusion DetectionUse an intrusion detection system to detect an attack.
- Recovering From AttacksRestore state and identify attacks.
- Restoration: AvailabilityMaintain redundant copies of system administrative data such as passwords, access control lists, domain name services, and user profile data.
- Identification: Audit TrailUse audit information to trace the actions of an attacker, support nonrepudiation, and support system recovery.