Abstract: A novel approach to performance engineering that leverages expertise to enable a user to design, build and deploy reliable and efficient applications is disclosed. In doing so, the innovation discloses novel techniques and mechanisms that integrate performance into the application development lifecycle and to adapt current software engineering practices and methodologies to include specific performance related activities. These activities include identifying performance objectives, creating performance models, applying performance-related design guidelines, conducting performance-related design inspections, performing regular code inspections, testing for performance, and conducting performance-related deployment inspections.

Abstract: A web application security frame (e.g., schema) that can incorporate expertise into an engineering activity, for example, a threat modeling activity, is provided. The novel web application security frame component can be applied to a threat modeling component to converge knowledge into the activity by identifying categories, vulnerabilities, threats, attacks and countermeasures. The novel schema can create a common framework that converges knowledge with respect to any application engineering activity (e.g., threat modeling, performance modeling). Additionally, a context precision mechanism can be employed to automatically and/or dynamically determine a context of a web application environment. This context can be used to automatically generate an appropriate web application security frame component.

Abstract: A server security schema that can incorporate server security-related expertise into an information model is provided. The novel server security schema component can be applied to an application server, a web server and/or a database server to converge knowledge into securing the server by identifying categories, vulnerabilities, threats, attacks and countermeasures. The novel schema can create a common framework that converges knowledge with respect to any server type. More particularly, the novel server security schema can address server categories including a share, a service, an account, an audit and log, a file and directory, a registry, a protocol, a port, and a patch and update category.