Arguing Satisfaction of Security Requirements

View Sample PDF

Author(s): C. B. Haley (The Open University, UK), R. Laney (The Open University, UK), J. D. Moffett (The Open University, UK)and Bashar Nuseibeh (The Open University, UK)
Copyright: 2008
Pages: 23
Source title: Information Security and Ethics: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Hamid Nemati (The University of North Carolina at Greensboro, USA)
DOI: 10.4018/978-1-59904-937-3.ch215

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Arguing Satisfaction of Security Requirements on the publisher's website for pricing and purchasing information.

Abstract

This chapter presents a process for security requirements elicitation and analysis, based around the construction of a satisfaction argument for the security of a system. The process starts with the enumeration of security goals based on assets in the system, then uses these goals to derive security requirements in the form of constraints. Next, a satisfaction argument for the system is constructed, using a problem-centered representation, a formal proof to analyze properties that can be demonstrated, and structured informal argumentation of the assumptions exposed during construction of the argument. Constructing the satisfaction argument can expose missing and inconsistent assumptions about system context and behavior that effect security, and a completed argument provides assurances that a system can respect its security requirements.

The IRMA Community

Research IRM

Arguing Satisfaction of Security Requirements

Purchase

Abstract

Related Content

IRMA Sponsors