The third edition of the International Workshop on Designing and Measuring Security in Software Architecture (DeMeSSA), intends to provide researchers and practitioners with a forum to exchange ideas and experiences, analyze research and development issues, discuss promising solutions, and propose inspiring visions for the future in complementary fields of security from the perspective of the Software Architecture: Designing Security in Software Architecture and Measuring Security in Software Architecture Design.

Designing security in Software Architecture

Security architecture techniques

• Architecture Risk Management

• Security-Driven Architecture

• Threat Modelling

• Design Patterns Driven Security

• Enforcing Security between Architecture and Implementation Artefacts

• Security strategic decision-making at architectural phase

Model-based techniques for secure software architectures

• Model-based Security Risk Assessment/Analysis

• Secure Architecture Modeling

• Attack, Intrusion and Defense Modeling

Measuring security in Software Architecture

Metrics and measurement approaches

• Security, trust and privacy metrics

• Measurement systems and associated data gathering

• Security trade-off analysis

• Assurance and security certification methods

• Runtime security measurements

• Visualization approaches for security measurements

• Empirical case studies and experimental results from security measurements

• Studies on diversity effects, opportunities in security methods and practices

Domains of applications

• ICT Technology domains 

• Cloud, IoT, Cyber-Physiscal Systems 

• Situational awareness and Threat Intelligence

Relation of Security with other Extra-Functional Properties

• Safety and Security by Architectural Design

• Dependability and Security by Architectural Design

• Reliability and Security by Architectural Design

• Interdependencies and Trade-offs at Architectural Design

Future Perspectives, Challenges and Roadmaps on Security by Architectural Design