A Pattern Methodology to Specify Usable Security in Websites

Abstract

This paper presents an overview of a new pattern methodology which is oriented to achieve basic usability and security design requirements in websites. We emphasize the need of adequate and uniform guidelines useful to incorporate essential security and usability aspects in websites. In order to diminish this problem a methodology is provided to developers with guidance in designing a trustworthy environment through an effective feedback in case of a security issue are explicitly incorporated in the development life cycle. Our proposal integrates several collections of design patterns (based on HCI-S design criteria), complemented with measurement models (based on Goal Question Metrics, GQM, approach) to evaluate the obtained results.