Ensure security at all levels
Security is one of the essential crosscutting concerns for an application as it implies that by using different tools, specifications, processes, and applications, we are protecting an application. It is important to note that security is about protecting, preventing, and mitigating different types of possible threats.
When discussing architecture security, we discuss a set of processed tools and teams working together to achieve threat detection and prevention.
Working on security can impact other quality attributes. For example, actions to support security might reduce performance in some situations and the other way around (see Figure 4.3):
Figure 4.3 – Example of quality attributes that influence how secure a system might be
As architecture is also evolving, there is a need for security checks and evaluations to be done regularly. This way, we can, in time, determine vulnerabilities and do the necessary actions...
