Analysing and visualising security and usability in IRIS

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 543-548

  Faily, Shamal ^a   Fléchais, Ivan ^a  

^a UNIVERSITY OF OXFORD   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

HUMAN FACTORS; SECURE SYSTEM; SECURITY RISK ANALYSIS; TASK ANALYSIS;

HUMAN ENGINEERING; JOB ANALYSIS; RISK ANALYSIS; RISK ASSESSMENT; RISK PERCEPTION; SAFETY FACTOR;

SECURITY OF DATA;

EID: 77952393067     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.28     Document Type: Conference Paper

References (21)

1. A. Seffah and E. Metzker, "The obstacles and myths of usability and software engineering," Commun. ACM, vol. 47, no. 12, pp. 71-76, 2004.
2. J. Heiskari, M. Kauppinen, M. Runonen, and T. Männistö, "Bridging the Gap Between Usability and Requirements Engineering," in 17th IEEE International Requirements Engineering Conference. IEEE, 2009, pp. 303-308.
3. S. Faily and I. Fléchais, "Context-Sensitive Requirements and Risk Management with IRIS," in 17th IEEE International Requirements Engineering Conference. IEEE, 2009, pp. 379-380.
4. J. A. Bradbury, "The policy implications of differing concepts of risk," Science, Technology, and Human Values, vol. 14, no. 4, pp. 380-399, 1989.
5. D. Diaper, "Understanding Task Analysis for Human-Computer Interaction," in The Handbook of Task Analysis for Human-Computer Interaction, D. Diaper and N. A. Stanton, Eds. Lawrence Erlbaum Associates, 2004, pp. 5-47.
6. N. Mikkelson and W. O. Lee, "Incorporating User Archetypes into Scenario-based Design," in 9th Annual Usability Professionals' Association (UPA) Conference, Asheville, North Carolina, 2000.
7. A. Cooper, R. Reimann, and D. Cronin, About Face 3: The Essentials of Interaction Design. Wiley, 2007.
8. I. Hogganvik and K. Stølen, A graphical approach to risk identification, motivated by empirical investigations, 2006, vol. 4199 LNCS.
9. R. Gandhi and S.-W. Lee, "Visual analytics for requirements-driven risk assessment," Requirements Engineering Visualization, 2007. REV 2007. Second International Workshop on, pp. 6-6, Oct. 2007.
10. M. Feather, S. Cornford, J. Kiper, and T. Menzies, "Experiences using visualization techniques to present requirements, risks to them, and options for risk mitigation," Requirements Engineering Visualization, 2006. REV '06. First International Workshop on, pp. 10-10, Sept. 2006.
11. I. Hogganvik, "A graphical approach to security risk analysis," Ph.D. dissertation, University of Oslo, 2007.
12. IEC 61508: Functional safety of electrical/electronic/programmable electronic safety-related systems. Parts 1-7. Switzerland: International Electrotechnical Commission, 1998-2005.
13. ISO, "ISO 9241-11. Ergonomic requirements for office work with visual display terminals (VDT)s - Part 11 Guidance on usability," Tech. Rep., 1998.
14. E. R. Tufte, Visual Explanations: Images and Quantities, Evidence and Narrative. Cheshire, Connecticut: Graphics Press, 1997.
15. -, Envisioning information. Cheshire, Conn. (P.O. Box 430, Cheshire 06410): Graphics Press, 1990.
16. S. Faily and I. Fléchais, "Usable Secure Software Engineering with IRIS," in International Symposium on Engineering Secure Software and Systems, ser. Submitted. Springer-Verlag, February 2010.
17. G. Sindre and L. Opdahl, "Eliciting security requirements with misuse cases," Requirements Engineering, vol. 10, no. 1, pp. 34-44, 2005.
18. H. Beyer and K. Holtzblatt, Contextual design: defining customer-centered systems. San Francisco, CA, USA: Morgan Kaufmann Publishers Inc., 1998.
19. A. Van Lamsweerde and E. Letier, "Integrating obstacles in goal-driven requirements engineering," Apr 1998, pp. 53-62.
20. I. Flechais, C. Mascolo, and M. A. Sasse, "Integrating security and usability into the requirements and design process," International Journal of Electronic Security and Digital Forensics, vol. 1, no. 1, pp. 12-26, 2007.
21. A. Cooper, The Inmates Are Running the Asylum: Why High Tech Products Drive Us Crazy and How to Restore the Sanity (2nd Edition). Pearson Higher Education, 1999.