M-CODE: um modelo para medição de confidencialidade e desempenho para aplicações móveis seguras

• Ano de defesa: 2008
• Autor(a) principal: Carvalho, Aglaíse Frota Moura
• Tipo de documento: Dissertação
• Tipo de acesso: Acesso aberto
• Idioma: por
• Palavras-chave em Português: Computabilidade e modelos de computação; Dispositivos móveis; Segurança; Confidencialidade; Desenvolvimento de aplicações seguras; Medição; Desempenho; Security; Confidentiality; Mobile devices; Development of secure applications; Measurement; Performance; Sistema de comunicação móvel; Interface de programas aplicativos (Software) - Segurança
• Link de acesso: http://www.repositorio.ufc.br/handle/riufc/16901

Mobile devices have resource restrictions that constrain the use of security mechanisms in applications, such as e-commerce, which demand, for example, confidentiality issues. There is then a need for a mechanism to help developers to choose the appropriate solution that provides security for a specific mobile device application, taking in consideration the limitation of performance, memory and battery, among others. Thus, this work proposes a security measurement model focused on confidentiality and performance for mobile applications. This model is defined in conformance with the cryptographic algorithm and/or protocol more adequate to the mobile application. Confidentiality and performance degrees are calculated according to the proposed model measurements and weights defined by the secure mobile application developer. . The following measurement approaches are used to specify the proposal: Goal-Question-Metric (GQM) and Goal-Driven Software Measurement (GDSM), variations of these approaches, and the Security Measurement (SM) framework. As a case study, a mobile application already existent is used for the analysis and calculation of the confidentiality and performance degrees of chosen algorithms and protocols