A meta-model for usable secure requirements engineering

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2010, Pages 29-35

  Faily, Shamal ^a   Fléchais, Ivan ^a  

^a UNIVERSITY OF OXFORD   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CONCEPTUAL MODEL; CRITICAL INFRASTRUCTURE; HUMAN FACTORS; INFORMATION SECURITY; META MODEL; SECURE SOFTWARE ENGINEERING; TECHNICAL SECURITY;

COMPUTER SOFTWARE; HUMAN ENGINEERING; REQUIREMENTS ENGINEERING; SECURITY OF DATA;

ENGINEERING;

EID: 77954570579     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1809100.1809105     Document Type: Conference Paper

References (30)

1. A Kerckhoffs, "La cryptographie militaire", Journal des Sciences Militaires, pp. 5-38, 1883.
2. J.H. Saltzer and M.D. Schroeder, "The protection of information in computer systems", Proceedings of the IEEE, vol. 63, no. 9, pp. 1278-1308, Sept. 1975.
3. A Adams and MA Sasse, "Users are not the enemy", Communications of the ACM, vol. 42, pp. 41-46, 1999.
4. Alma Whitten and J. D. Tygar, "Why Johnny can't encrypt: a usability evaluation of PGP 5.0", in SSYM'99: Proceedings of the 8th conference on USENIX Security Symposium, Berkeley, CA, USA, 1999, pp. 14-14, USENIX Association.
5. Ross Anderson and Shailendra Fuloria, "Security economics and critical national infrastructure", in Eight Workshop on the Economics of Information Security (WEIS 2009), 2009.
6. Pamela Zave and Michael Jackson, "Four dark corners of requirements engineering", ACM Trans. Softw. Eng. Methodol., vol. 6, no. 1, pp. 1-30, 1997.
7. Betty H. C. Cheng and Joanne M. Atlee, "Research directions in requirements engineering", in FOSE '07: 2007 Future of Software Engineering, Washington, DC, USA, 2007, pp. 285-303, IEEE Computer Society.
8. D. Firesmith, "Specifying reusable security requirements", Journal of Object Technology, vol. 3, no. 1, pp. 61-75, 2004.
9. Daniel Mellado, Eduardo Fernández-Medina, and Mario Piattini, "A common criteria based security requirements engineering process for the development of secure information systems", Computer Standards & Interfaces, vol. 29, no. 2, pp. 244 - 253, 2007.
10. Nicolas Mayer, Model-based Management of Information System Security Risk, PhD thesis, University of Namur, 2009.
11. D. Diaper, "Understanding Task Analysis for Human-Computer Interaction", in The Handbook of Task Analysis for Human-Computer Interaction, Dan Diaper and Neville A. Stanton, Eds., pp. 5-47. Lawrence Erlbaum Associates, 2004.
12. Ian. F. Alexander and Neil Maiden, Eds., Scenarios, Stories, Use Cases: Through the Systems Development Life-Cycle, John Wiley & Sons Ltd, 2004.
13. Ian Alexander, "Negative scenarios and misuse cases", in Scenarios, Stories, Use Cases: Through the Systems Development Life-Cycle, Ian. F. Alexander and Neil Maiden, Eds. John Wiley & Sons Ltd, 2004.
14. A. van Lamsweerde, Requirements engineering: from system goals to UML models to software specifications, John Wiley, Hoboken, NJ, 2009.
15. Eric Yu, Modeling Strategic Relationships for Process Reengineering, PhD thesis, University of Toronto, 1995.
16. Axel van Lamsweerde, "Elaborating security requirements by construction of intentional anti-models", in ICSE '04: Proceedings of the 26th International Conference on Software Engineering, Washington, DC, USA, 2004, pp. 148-157, IEEE Computer Society.
17. Golnaz Elahi, Eric Yu, and Nicola Zannone, "A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilities", Requirements Engineering, vol. 15, no. 1, pp. 41-62, 2010.
18. R. Matulevičius, N. Mayer, and P. Heymans, "Alignment of misuse cases with security risk management", Availability, Reliability and Security, 2008. ARES 08. Third International Conference on, pp. 1397-1404, March 2008.
19. Raimundas Matulevičius, Nicolas Mayer, Haralambos Mouratidis, Eric Dubois, Patrick Heymans, and Nicolas Genon, "Adapting Secure Tropos for Security Risk Management in the Early Phases of Information Systems Development", in CAiSE '08: Proceedings of the 20th international conference on Advanced Information Systems Engineering, Berlin, Heidelberg, 2008, pp. 541-555, Springer-Verlag.
20. ISO/IEC 13407: Human-Centered Design Processes for Interactive Systems, ISO/IEC, 1999.
21. Raian Ali, Yijun Yu, Ruzanna Chitchyan, Armstrong Nhlabatsi, and Paolo Giorgini, "Towards a Unified Framework for Contextual Variability in Requirements", 3rd International Workshop on Software Product Management (IWSPM09), Atlanta, USA, 2009.
22. Gilbert Cockton, "Grounded design: Integrating models and evaluation", Interacting in the large: Developing a framework for integrating models in HCI, ACM CHI'99 Workshop, 1999.
23. Abigail Sellen, Yvonne Rogers, Richard Harper, and Tom Rodden, "Reflecting human values in the digital age", Commun. ACM, vol. 52, no. 3, pp. 58-66, 2009.
24. Chris Hinds, "The case against a positivist philosophy of requirements engineering", Requirements Engineering, vol. 13, no. 4, pp. 315-328, 2008.
25. Alan Cooper, Robert Reimann, and David Cronin, About Face 3: The Essentials of Interaction Design, Wiley, 2007.
26. Anne Dardenne, Axel van Lamsweerde, and Stephen Fickas, "Goal-directed requirements acquisition", Science of Computer Programming, vol. 20, no. 1-2, pp. 3-50, 1993.
27. M. A Jackson, Problem frames : analysing and structuring software development problems, Addison-Wesley/ACM Press, Harlow, England, 2001.
28. A. van Lamsweerde and E. Letier, "Handling obstacles in goal-oriented requirements engineering", Software Engineering, IEEE Transactions on, vol. 26, no. 10, pp. 978-1005, 2000.
29. Axel van Lamsweerde, "Elaborating security requirements by construction of intentional anti-models", in ICSE '04: Proceedings of the 26th International Conference on Software Engineering, Washington, DC, USA, 2004, pp. 148-157, IEEE Computer Society.
30. Shamal Faily and Ivan Fléchais, "Analysing and Visualising Security and Usability in IRIS", in Availability, Reliability and Security, 2010. ARES 10. Fifth International Conference on, 2010.