A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems
Large amount of (security) faults existing in software systems could be complex and hard to identify during the fault analysis. So, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of fau...
| Main Authors: | , , |
|---|---|
| Format: | Conference or Workshop Item |
| Language: | English |
| Published: |
IEEE
2012
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/47743/1/A%20goal-based%20modeling%20approach%20to%20develop%20security%20requirements%20of%20fault%20tolerant%20security-critical%20systems.pdf |
| _version_ | 1825929864400601088 |
|---|---|
| author | Mougouei, Davoud Moghtadaei, Mohammad Moradmand, Somayeh |
| author_facet | Mougouei, Davoud Moghtadaei, Mohammad Moradmand, Somayeh |
| author_sort | Mougouei, Davoud |
| collection | UPM |
| description | Large amount of (security) faults existing in software systems could be complex and hard to identify during the fault analysis. So, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of faults in the system may eventually lead to a security failure. To avoid security failure of the target system we need to make it flexible and tolerant in the presence of security faults. This paper introduces a goal-based modeling approach to develop security requirements of security-critical systems (SCSs) by explicitly factoring the faults into the requirement engineering process. Our approach establishes a model for security requirements (SRM) with respect to the formally described model of security faults (SFM). We care for fault tolerance in SRM by taking into consideration partial satisfaction of security goals. The proposed approach factors this partiality into the goals by applying proper mitigation techniques during the refinement process. This eventually contributes to a fault tolerant model for security requirements of the target system. |
| first_indexed | 2024-03-06T09:02:59Z |
| format | Conference or Workshop Item |
| id | upm.eprints-47743 |
| institution | Universiti Putra Malaysia |
| language | English |
| last_indexed | 2024-03-06T09:02:59Z |
| publishDate | 2012 |
| publisher | IEEE |
| record_format | dspace |
| spelling | upm.eprints-477432016-07-14T09:33:54Z http://psasir.upm.edu.my/id/eprint/47743/ A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems Mougouei, Davoud Moghtadaei, Mohammad Moradmand, Somayeh Large amount of (security) faults existing in software systems could be complex and hard to identify during the fault analysis. So, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of faults in the system may eventually lead to a security failure. To avoid security failure of the target system we need to make it flexible and tolerant in the presence of security faults. This paper introduces a goal-based modeling approach to develop security requirements of security-critical systems (SCSs) by explicitly factoring the faults into the requirement engineering process. Our approach establishes a model for security requirements (SRM) with respect to the formally described model of security faults (SFM). We care for fault tolerance in SRM by taking into consideration partial satisfaction of security goals. The proposed approach factors this partiality into the goals by applying proper mitigation techniques during the refinement process. This eventually contributes to a fault tolerant model for security requirements of the target system. IEEE 2012 Conference or Workshop Item PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/47743/1/A%20goal-based%20modeling%20approach%20to%20develop%20security%20requirements%20of%20fault%20tolerant%20security-critical%20systems.pdf Mougouei, Davoud and Moghtadaei, Mohammad and Moradmand, Somayeh (2012) A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems. In: International Conference on Computer and Communication Engineering (ICCCE 2012), 3-5 July 2012, Kuala Lumpur, Malaysia. (pp. 200-205). 10.1109/ICCCE.2012.6271180 |
| spellingShingle | Mougouei, Davoud Moghtadaei, Mohammad Moradmand, Somayeh A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title | A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title_full | A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title_fullStr | A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title_full_unstemmed | A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title_short | A goal-based modeling approach to develop security requirements of fault tolerant security-critical systems |
| title_sort | goal based modeling approach to develop security requirements of fault tolerant security critical systems |
| url | http://psasir.upm.edu.my/id/eprint/47743/1/A%20goal-based%20modeling%20approach%20to%20develop%20security%20requirements%20of%20fault%20tolerant%20security-critical%20systems.pdf |
| work_keys_str_mv | AT mougoueidavoud agoalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems AT moghtadaeimohammad agoalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems AT moradmandsomayeh agoalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems AT mougoueidavoud goalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems AT moghtadaeimohammad goalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems AT moradmandsomayeh goalbasedmodelingapproachtodevelopsecurityrequirementsoffaulttolerantsecuritycriticalsystems |