BioMedBridges security architecture and framework

This report on the BioMedBridges security framework covers a complete series of steps from requirements gathering (identified by means of the two surveys and based upon requirement clusters that are explained in the report to deliverable 5.1) to data flow diagrams and threats (constructed from results of the second survey) to risks, further to countermeasures, and finally towards the architectural elements of the proposed security framework. An important characteristic of the security architecture described here is its bottom-up development: process elements and descriptions are based on feedback from the biomedical sciences research infrastructures involved in the respective BioMedBridges use cases. Specifications in the form of activity diagrams (deliverable 5.1) and data flow diagrams (this deliverable report) were developed in direct interaction with representatives of the use case work packages. Domain specific (EGA) and domain independent (EGI) experience was sought for the definition of security specific process elements.