Earticle

초록

영어

It has become clear in software development that functionality and security must go hand in hand in cases where security concerns are to be incorporated early in stages of design. An essential aspect of such a process is threat modeling that integrates security with functional specification. Such an approach includes construction of two models: a functional model and a security (threat) model. The problem of integration involves assimilating security concerns while developing system specifications. One solution is to represent the dynamic behavior of security attacks as statechart diagrams and integrate the attacks into the functional behavior of the system; however, such an approach results in a complex set of fragmented descriptions lacking an underlying conceptual representation that can be tailored to include security concerns. This paper introduces a flow-based diagrammatic representation that includes such features. The advantages of the methodology are demonstrated through contrasting it with a statechart-based study case.

목차

Abstract
 1. Introduction
 2. Problem: Integrating Security Concerns and Requirement Specification
 3. Sample Approach
 4. Flowthing model
 5. FM-based Representation
 6. Security-based refinement of FM description
 7. Conclusion
 References

키워드

저자

• Sabah Al-Fedaghi [ Computer Engineering Department, Kuwait University ]
• Fajer Al-Kanderi [ Computer Engineering Department, Kuwait University ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605