SoK: The Design Paradigm of Safe and Secure Defaults

Guardado en:
Detalles Bibliográficos
Publicado en:arXiv.org (Dec 23, 2024), p. n/a
Autor principal: Ruohonen, Jukka
Publicado:
Cornell University Library, arXiv.org
Materias:
Acceso en línea:Citation/Abstract
Full text outside of ProQuest
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!

MARC

LEADER 00000nab a2200000uu 4500
001 3148978595
003 UK-CbPIL
022 |a 2331-8422 
035 |a 3148978595 
045 0 |b d20241223 
100 1 |a Ruohonen, Jukka 
245 1 |a SoK: The Design Paradigm of Safe and Secure Defaults 
260 |b Cornell University Library, arXiv.org  |c Dec 23, 2024 
513 |a Working Paper 
520 3 |a In security engineering, including software security engineering, there is a well-known design paradigm telling to prefer safe and secure defaults. The paper presents a systematization of knowledge (SoK) of this paradigm by the means of a systematic mapping study and a scoping review of relevant literature. According to the mapping and review, the paradigm has been extensively discussed, used, and developed further since the late 1990s. Partially driven by the insecurity of the Internet of things, the volume of publications has accelerated from the circa mid-2010s onward. The publications reviewed indicate that the paradigm has been adopted in numerous different contexts. It has also been expanded with security design principles not originally considered when the paradigm was initiated in the mid-1970s. Among the newer principles are an "off by default" principle, various overriding and fallback principles, as well as those related to the zero trust model. The review also indicates obstacles developers and others have faced with the~paradigm. 
653 |a Mapping 
653 |a Principles 
653 |a Internet of Things 
653 |a Cybersecurity 
773 0 |t arXiv.org  |g (Dec 23, 2024), p. n/a 
786 0 |d ProQuest  |t Engineering Database 
856 4 1 |3 Citation/Abstract  |u https://www.proquest.com/docview/3148978595/abstract/embedded/6A8EOT78XXH2IG52?source=fedsrch 
856 4 0 |3 Full text outside of ProQuest  |u http://arxiv.org/abs/2412.17329