Using Security and Dependability Patterns for Reaction Processes

Security and dependability (S&D) patterns support the structuring and reusing of design solutions to specific known problems. They capture S&D features and support reusing strategies across ´similar´ design problems. Despite the fact that they simplify the analysis and implementation of specific design problems concerning with S&D features, the empirical results about S&D patterns and their usages are still patchy. Moreover, there is yet little experience in reporting how S&D patterns transfer across different industry domains. This paper is concerned with the adoption of S&D patterns. It reports our experience in adopting and eliciting S&D patterns in the air traffic management (ATM) domain. Empirical results show how patters provide useful guidance in order to structure the analysis of operational aspects. This paper highlights how S&D patterns, used at the design stage, provide structuring guidance at the operational stage. Hence, they are also useful as structured reaction mechanisms to threats or hazards. In conclusions, this paper provides useful insights about adopting and deploying S&D patterns into and across industry domains.