Astrolabe: A collaborative multiperspective goal-oriented risk analysis methodology

IEEE Transactions on Systems, Man, and Cybernetics Part A:Systems and Humans

Volumn 39, Issue 1, 2009, Pages 66-85

  Bagheri, Ebrahim ^a   Ghorbani, Ali A ^a  

^a UNIVERSITY OF NEW BRUNSWICK   (Canada)

Author keywords

Goal oriented modeling; Risk analysis; Risk lifecycle

Indexed keywords

RISK ASSESSMENT; SAFETY FACTOR; SYSTEM STABILITY;

CAUSAL ANALYSIS; GOAL-ORIENTED MODELING; ORGANIZATIONAL THEORIES; SOFTWARE REQUIREMENTS; SYSTEM RISKS;

RISK ANALYSIS;

EID: 58149203206     PISSN: 10834427     EISSN: None     Source Type: Journal    
DOI: 10.1109/TSMCA.2008.2007948     Document Type: Conference Paper

References (34)

1. Standard for Software Life Cycle Processes - Risk Management, IEEE Std. 1540-2001, 2001.
2. Risk Management Guidelines: Companion to Australian/New Zealand Standard, AN/NZS 4360: 2004 (HB 436:2004), 2004.
3. Y. Asnar and P. Giorgini, "Modelling risk and identifying countermeasure in organizations," in Proc. CRITIS, 2006, pp. 55-66.
4. E. Bagheri, A. Ghorbani, and A. Astrolabe, "A collaborative multiperspective goal-oriented risk analysis methodology," Univ. New Brunswick, Fredericton, NB, Canada, Tech. Rep. TR08-190, Mar. 2008.
5. E. Bagheri and A. A. Ghorbani, "Risk analysis in critical infrastructure systems based on the Astrolabe methodology," in Proc. 5th Annu. Conf. CNSR, May 2007, pp. 335-344.
6. F. Braber, I. Hogganvik, M. Lund, K. Stolen, and F. Vraalsen, "Model-based security analysis in seven steps - A guided tour to the coras method," BT Technol. J., vol. 25, no. 1, pp. 101-117, Jan. 2007.
7. P. Bresciani, P. Giorgini, F. Giunchiglia, J. Mylopoulos, and A. Perini, "Tropos: An agent-oriented software development methodology," J. Auton. Agents Multi-Agent Syst., vol. 8, no. 3, pp. 203-236, May 2004.
8. C. Chittister and Y. Y. Haimes, "Risk associated with software development: A holistic framework for assessment and management," IEEE Trans. Syst., Man Cybern., vol. 23, no. 3, pp. 710-723, May/Jun. 1993.
9. M. D. Cohen, J. G. March, and J. P. Olsen, "A garbage can model of organizational choice," Adm. Sci. Q., vol. 17, no. 1, pp. 1-25, 1972.
10. R. Cooke, Experts in Uncertainty: Opinion and Subjective Probability in Science. London, U.K.: Oxford Univ. Press, 1991.
11. R. Cooke and L. Goossens, "Procedures guide for structured expert judgement in accident consequence modelling," Radiat. Prot. Dosim. vol. 90, no. 3, pp. 303-311, 2000.
12. J. A. Curry, Sociology for the Twenty-First Century, 3rd ed. Englewood Cliffs, NJ: Prentice-Hall, 2002.
13. R. M. Cyert and J. G. March, A Behavioral Theory of the Firm. Englewood Cliffs, NJ: Prentice-Hall, 1963.
14. E. Gross, "The definition of organizational goals," Brit. J. Sociol., vol. 20, no. 3, pp. 277-294, Sep. 1969.
15. Y. Y. Haimes, Risk Modeling, Assessment, and Management, 2nd ed. New York: Wiley, Apr. 2004.
16. Y. Y. Haimes, S. Kaplan, and J. H. Lambert, "Risk filtering, ranking, and management framework using hierarchical holographic modeling," Risk Anal., vol. 22, no. 2, pp. 383-397, Apr. 2002.
17. H. Kaiya, H. Horai, and M. Saeki, "Agora: Attributed goal-oriented requirements analysis method," in Proc. RE, 2002, pp. 13-22.
18. E. Kavakli and P. Loucopoulos, "Experiences with goal-oriented modeling of organizational change," IEEE Trans. Syst., Man Cybern. C, Appl. Rev., vol. 36, no. 2, pp. 221-235, Mar. 2006.
19. R. Kazman, M. Klein, M. Barbacci, T. Longstaff, H. Lipson, and J. Carriere, "The architecture tradeoff analysis method," in Proc. 4th IEEE ICECCS, 1998, pp. 68-78.
20. N. Mayer, A. Rifaut, and E. Dubois, "Towards a risk-based security requirements engineering framework," in Proc. 11th Int. Workshop REFSQ, Jun. 2005.
21. S. Melnik, Generic Model Management: Concepts and Algorithms. Secaucus, NJ: Springer-Verlag, 2004.
22. C. Meyers, "Risk management considerations for interoperable acquisition," CMU SEI, Pittsburgh, PA, Tech. Rep. CMU/SEI-2006-TN-032, Aug. 2006.
23. T. Parsons, The System of Modern Societies. Englewood Cliffs, NJ: Prentice-Hall, 1971.
24. F. Redmill, M. Chudleigh, and J. Catmur, System Safety: HAZOP and Software HAZOP. New York: Wiley, 1999.
25. C. Rolland, G. Grosz, and R. Kla, "Experience with goal-scenario coupling in requirements engineering," in Proc. IEEE Int. Symp. Requir. Eng., 1999, pp. 74-81.
26. W. R. Scott, "Technology and structure: An organization-level perspective," in Technology and Organizations, P. S. Goodman and L. S. Sproull, Eds. San Francisco, CA: Josey-Bass, 1990, pp. 109-143.
27. W. R. Scott, Organizations: Rational, Natural, and Open Systems. Englewood Cliffs, NJ: Prentice-Hall, 1992.
28. H. A. Simon, "Rational decision making in business organizations," Amer. Econ. Rev., vol. 69, no. 4, pp. 493-513, Sep. 1979. Online. Available: http://ideas.repec.org/a/aea/ aecrev/v69y1979i4p493-513.html
29. H. Tu, J. Allanach, S. Singh, K. R. Pattipati, and P. Willett, "Information integration via hierarchical and hybrid Bayesian networks," IEEE Trans. Syst., Man Cybern. A, Syst., Humans, vol. 36, no. 1, pp. 19-33, Jan. 2006.
30. J. V. Turner and J. L. Hunsucker, "Effective risk management: A goal based approach," Int. J. Technol. Manag., vol. 17, no. 4, pp. 438-458, Jul. 2003.
31. A. Van Lamsweerde and E. Letier, "Handling obstacles in goal-oriented requirements engineering," IEEE Trans. Softw. Eng., vol. 26, no. 10, pp. 978-1005, Oct. 2000.
32. R. E. Walpole, Elementary Statistical Concepts, 2nd ed. New York: Macmillan, 1983.
33. E. Yu and J. Mylopoulos, "Understanding why in software process modelling, analysis, and design," in Proc. 16th Int. Conf. Softw. Eng., May 1994, pp. 159-168.
34. M. Zuckerman, M. H. Kernis, S. M. Guarnera, J. F. Murphy, and L. Rappoport, "The egocentric bias: Seeing oneself as cause and target of others behavior," J. Person., vol. 51, no. 4, pp. 621-630, 1983.