Security in software architecture: A case study

The idea of ensuring that non-functional requirements such as maintainability, performance, reusability, reliability, and others are designed and built in to new software is not a new one. However, software security as a particular non-functional requirement of software systems is all too often addressed late in the software development process. As a result, the security of such software systems is poor and can lead to security compromises (such as theft of service or information), increased costs in maintaining the software, and many indirect costs such as system downtime, loss of productivity, etc. This paper will survey existing research into architecting and engineering security and will present this material along with a case study of Daniel J. Bernstein's qmail Internet mail server software.