Earticle

초록

영어

Large amount of security faults existing in software systems could be complex and hard to identify during the fault analysis. Therefore, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of faults in the system may eventually lead to a security failure. To avoid security failure of the target system it is required to make the system flexible and tolerant in the presence of security faults. This paper proposes a goal-based modeling approach to develop security requirements of Security-Critical Systems (SCSs) through explicitly factoring the faults into the requirement engineering process. Our approach establishes the Security Requirement Model (SRM) of the system based on its respective Security Fault Model (SFM). We incorporate fault tolerance into the SRM through considering the partial satisfaction of security goals. The proposed approach factors this partiality into the goals by using proper mitigation techniques during the refinement process. This approach eventually contributes to a fault tolerant model for security requirements of the target system.

목차

Abstract
 1. Introduction
 2. Related Works
 3. Modeling Approach
  3.1. Modeling Steps
 4. Application of Modeling Approach
  4.1. Step 1: Develop Use Case-Misuse Case Diagram.
  4.2. Step 2: Identify Assets and Security Goals
  4.3. Step 3: Develop the SFM
  4.4. Step 4: SFM Analysis and Pruning
  4.5. Step 5: Develop SRM and Mitigate Faults
 4. Conclusion
 References

키워드

저자

• Davoud Mougouei [ Department of Information System Faculty of Computer Science and Information Technology Universiti Putra Malaysia ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Software Engineering and Its Applications

• 간기

  월간

• pISSN

  1738-9984

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605