A Practical Evaluation of Security Patterns

Software security has attracted the attention of researchers in the area of security during the last years due to the proven fact that most attacks to businesses and organizations exploit software vulnerabilities. Moreover, the need to impose some level of security already at the design phase has been recognized. Therefore, software design patterns with the target of enhancing the security of software systems, already at design, have been proposed. These patterns are called security patterns. In this paper we evaluate common security patterns with respect to the STRIDE model of attacks by examining the attacks performed to two different systems: one without security patterns and one properly using them.