CAJ | 학술논문

为在软件开发的早期阶段判断系统的安全属性是否在软件体系结构中得到体现，识别体系结构设计中的潜在威胁，需要对软件体系结构的安全性进行评估。结合 Manadhata等提出的攻击面评估指标和软件体系结构的属性，提出基于攻击面的软件体系结构安全性评估方法，并通过体系结构转换探讨如何通过减小软件体系结构的攻击面提高软件系统的安全性。
위재연건개발적조기계단판단계통적안전속성시부재연건체계결구중득도체현，식별체계결구설계중적잠재위협，수요대연건체계결구적안전성진행평고。결합 Manadhata등제출적공격면평고지표화연건체계결구적속성，제출기우공격면적연건체계결구안전성평고방법，병통과체계결구전환탐토여하통과감소연건체계결구적공격면제고연건계통적안전성。
To check whether the security properties of the software architecture are reflected in the early stage of the software development life cycle,identifying the potential threat of architecture design,the security evaluations of the software architecture are needed.The attack surface evaluating metrics proposed by Manadhata etc.and software architecture properties were com-bined,a software architecture security evaluation method based on attack surface was proposed,and the issue that how to im-prove the software security by reducing the attack surface of software architecture was discussed.