Christoph König, Ina Schaefer
2022
Offen
Taxonomy-based software development pursues the goal of using systematics to support developers in constructing secure and reliable software. By documenting and disclosing properties and relationships between artifacts, developers can analyze the origin and impact of vulnerabilities according to threat analysis and assumed attacker models (e.g., Common Criteria or ISO 21434) within and across system families, resulting in a reduction of testing complexity and assessment of security properties. Taxonomies can also be used for systematic design decisions in forward engineering, analysis and re-engineering: One use case is the selection of certain systems that realize an optimal tradeoff between resilience and efficiency for the same functionality.