Goal-oriented, B-based formal derivation of security design specifications from security requirements

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 1443-1450

  Hassan, Riham ^a   Bohner, Shawn ^a   El Kassas, Sherif ^b   Eltoweissy, Mohamed ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

^b The American University in Cairo

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION-SPECIFIC; B-METHOD; DESIGN SPECIFICATIONS; DEVELOPMENT PHASES; FORMAL DERIVATION; INTERNATIONAL CONFERENCES; LIFE-CYCLE; REQUIREMENTS MODELING; SECURE SOFTWARE ENGINEERING; SECURITY DESIGN; SECURITY ENGINEERING; SECURITY REQUIREMENTS;

CANNING; SOFTWARE ENGINEERING; SPECIFICATIONS; TECHNOLOGY;

MACHINE DESIGN;

EID: 49049100286     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.77     Document Type: Conference Paper

References (25)

1. A. van Lamsweerde, "Elaborating Security Requirements by Construction of Intentional Anti-Models", Proc. ICSE'04: 26th Intl. Conf. on Software Engineering, May 2004.
2. Wilander, J. & Gustavsson, J., "Security requirements - A field study of current practice", Symposium on Requirement Engineering for Information Security (SREIS' 2005), Paris, France, 2005.
3. R.A. Kemmerer, "Cybersecurity", Invited Mini-Tutorial, Proc. ICSE'03: 25th Intl. Conf. on Software Engineering, Portland, IEEE CS Press, May 2003, 705-715.
4. CERT, http://www.cert.org/stats/cert stas.html.
5. J. Viega and G. McGraw, Building Secure Software: How to Avoid Security Problems the Right Way, Addisson-Wesley, 2001.
6. A. van Lamsweerde and E. Letier, "Handling Obstacles in Goal-Oriented Requirements Engineering", IEEE Transactions on Software Engineering, Special Issue on Exception Handling, Vol. 26 No. 10, Oct. 2000, 978-1005.
7. Cansell, Dominique and M'ery, Dominique, "Foundations of the B Method", Proceedings of Computing and Informatics, vol. 22, pg. 1-31, 2003.
8. Sekerinski, Emil, et. al., "Program Development by Refinement: Case Studies Using the B Method", Springer, 1999.
9. E. Letier, Reasoning About Agents in Goal-Oriented Requirements Engineering, PhD Thesis, Department d' Tngenierie Informatique, Universite Catholique de Louvain, Louvain-la-Neuve, Belgium, 2001.
10. McDermott J, Fox C, "Using abuse case models for security requirements analysis", Proceedings of the 15th annual computer security applications conference (ACSAC'99), Phoenix, Arizona, 1999.
11. G. Sindre and A. L. Opdahl, "Eliciting Security Requirements with Misuse Cases", Requirements Engineering Journal, 10(1):34-44, 2005.
12. Firesmith, Donald G., "Security Use Cases", Journal of Object Technology (JOT), issue 5, 2003.
13. Hoss, Allyson M. and Carver, Doris L., "Ontological Approach to Improving Design Quality", in Proceeding of IEEE Aerospace Conference, pg. 12 pp., 2006.
14. Liu, L. and Yu, E. "From Requirements to Architectural Design - Using Goals and Scenarios", ICSE-2001 Workshop: From Software Requirements to Architectures (STRAW 2001) May 2001, Toronto, Canada. pp. 22-30.
15. L. Liu, E. Yu and J. Mylopoulos, "Security and Privacy Requirements Analysis within a Social Setting", Proc. RE'03-Intl. Conf. Requirements Engineering, Sept. 2003, 151-161.
16. J. Mylopoulos, M. Kolp, and J. Castro, "UML for agent-oriented software development: The Tropos proposal", Proc. of the 4th Int. Conf. on the Unified Modeling Language UML'01, Toronto, Canada, Oct. 2001.
17. J. Liu, Z. Liu, J. He, and X. Li, "Linking UML models of design and requirement", Pro. ASWEC'2004, Melbourne, Australia, 2004. IEEE Computer Society. 82
18. X. Li, Z. Liu, and J. He, "Formal and use-case driven requirement analysis in UML", COMPSAC01, pages 215-224, Illinois, USA, October 2001. IEEE Computer Society.
19. Z. Liu, J. He, X. Li, and Y. Chen, "A relational model for formal object-oriented requirement analysis in UML", In J. Dongand J. Woodcock, editors, Proc. ICFEM03, Lecture Notes in Computer Science 2885. Springer, 2003.
20. R. G. Dromey, "From requirements to design: Formalizing the key steps", SEEM 2003. International Conference on Software Engineering and Formal Methods. The University of Queensland School of Information Technology and Electrical Engineering, 2003, pp. 2.13.
21. M.G. Hinchey, J.L. Rash, C.A. Rouff, "Requirements to Design to Code: Towards a Fully Formal Approach to Automatic Code Generation", NASA Technical Report, January 2005.
22. P.J. Fontaine, Goal-Oriented Elaboration of Security Requirements, M.S. Thesis, Dept. Computing Science, University of Louvain, June 2001.
23. E. J. Amoroso, Fundamentals of Computer Security, Prentice-Hall, 1994.
24. Schneider, Steve, the b-method, PALGRAVE, 2001.
25. Nakagawa, H., Taguchi,K., Honiden, S., "Formal Specification Generator for KAOS", Proceedings of The International Conference on Automated Software Engineering (ASE'07), Atlanta, USA, Nov. 2007.