Towards Automatic Security Scenario Generation

Software security has become a crucial component of any software system in today’s market. However, the development of secure software is still a maturing process. Software architecture (SA) assessment methods have gained increasing attention in recent years. Most of these evaluation techniques are scenario-based, and thus depend heavily on the quality of the scenarios selected for their evaluation. In this paper, we present a systematic approach for the generation of coherent security scenarios for software architecture that can be used during a scenario-based security assessment. Our approach effectively incorporates security requirements, patterns and threats into a concrete security scenario. The work in this paper is part of on-going research to define a scenario-based security assessment methodology for SA.