Modelling and reasoning about security requirements in socio-technical systems

Data and Knowledge Engineering

Volumn 98, Issue , 2015, Pages 123-143

  Paja, Elda ^a   Dalpiaz, Fabiano ^b   Giorgini, Paolo ^a  

^a UNIVERSITY OF TRENTO   (Italy)

^b UTRECHT UNIVERSITY   (Netherlands)

Author keywords

Automated reasoning; Requirements models; Security requirements

Indexed keywords

COMPUTER SOFTWARE; CRYPTOGRAPHY; E-GOVERNMENT; FORMAL METHODS; MODELING LANGUAGES; SEMANTICS;

AUTOMATED REASONING; BUSINESS POLICIES; CONFIDENTIAL INFORMATION; FORMAL SEMANTICS; REQUIREMENTS MODELLING; REQUIREMENTS MODELS; SECURITY REQUIREMENTS; SOCIOTECHNICAL SYSTEMS;

DATA PRIVACY;

EID: 84942821010     PISSN: 0169023X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.datak.2015.07.007     Document Type: Article

References (42)

1. F.E. Emery Characteristics of socio-technical systems Tech. Rep. 527 1959 Tavistock Institute London
2. I. Sommerville, D. Cliff, R. Calinescu, J. Keen, T. Kelly, M. Kwiatkowska, J. Mcdermid, and R. Paige Large-scale complex IT systems Commun. ACM 55 7 2012 71 77
3. F. Dalpiaz, P. Giorgini, and J. Mylopoulos Adaptive socio-technical systems: a requirements-driven approach Requir. Eng. 18 4 2013 1 24
4. L. Liu, E. Yu, and J. Mylopoulos Security and privacy requirements analysis within a social setting Proceedings of the 11th IEEE International Requirements Engineering Conference 2003 151 161
5. P. Giorgini, F. Massacci, and J. Mylopoulos Requirement engineering meets security: a case study on modelling secure electronic transactions by VISA and Mastercard Proceedings of the 22nd International Conference on Conceptual Modeling LNCS vol. 2813 2003 263 276
6. D. Mellado, C. Blanco, L.E. Sánchez, and E. Fernández-Medina A systematic review of security requirements engineering Comput. Stand. Interfaces 32 4 2010 153 165
7. D.G. Firesmith Security use cases J. Object Technol. 2 3 2003 53 64
8. N.R. Mead, E.D. Hough, and T.R. Stehney II Security quality requirements engineering (SQUARE) methodology Tech. Rep. CMU/SEI-2005-009 2005
9. J. McDermott, and C. Fox Using abuse case models for security requirements analysis Proceedings of the 15th Annual Computer Security Applications Conference 1999 55 64
10. G. Sindre, and A.L. Opdahl Eliciting security requirements with misuse cases Requir. Eng. 10 1 2005 34 44
11. A. van Lamsweerde Elaborating security requirements by construction of intentional anti-models Proceedings of the 26th International Conference on Software Engineering 2004 148 157
12. C.B. Haley, R.R. Laney, J.D. Moffett, and B. Nuseibeh Security requirements engineering: a framework for representation and analysis IEEE Trans. Softw. Eng. 34 1 2008 133 153
13. P. Giorgini, F. Massacci, J. Mylopoulos, and N. Zannone Modeling security requirements through ownership, permission and delegation Proceedings of the 13th IEEE International Conference on Requirements Engineering 2005 167 176
14. H. Mouratidis, and P. Giorgini Secure Tropos: a security-oriented extension of the Tropos methodology Int. J. Softw. Eng. Knowl. Eng. 17 2 2007 285 309
15. F. Dalpiaz, E. Paja, and P. Giorgini Security requirements engineering via commitments Proceedings of the First Workshop on Socio-technical Aspects in Security and Trust 2011 1 8
16. A. Finkelstein, D. Gabbay, A. Hunter, J. Kramer, and B. Nuseibeh Inconsistency handling in multiperspective specifications IEEE TSE 20 8 1994 569 578
17. S. Trösterer, E. Beck, F. Dalpiaz, E. Paja, P. Giorgini, and M. Tscheligi Formative user-centered evaluation of security modeling: results from a case study Int. J. Secure Softw. Eng. 3 1 2012 1 19
18. E. Paja, F. Dalpiaz, M. Poggianella, P. Roberti, and P. Giorgini Modelling security requirements in socio-technical systems with STS-Tool Proceedings of the Forum at the 24th International Conference on Advanced Information Systems Engineering CEUR-WS vol. 855 2012 155 162
19. E. Paja, F. Dalpiaz, M. Poggianella, P. Roberti, and P. Giorgini STS-Tool: socio-technical security requirements through social commitments Proceedings of the 20th IEEE International Conference on Requirements Engineering 2012 331 332
20. E. Paja, F. Dalpiaz, and P. Giorgini Managing security requirements conflicts in socio-technical systems Proceedings of the 32nd International Conference on Conceptual Modeling LNCS vol. 8217 2013 270 283
21. P. Shvaiko, L. Mion, F. Dalpiaz, and G. Angelini The TasLab portal for collaborative innovation Proceedings of the 16th International Conference on Concurrent Enterprising 2010
22. F. Dalpiaz, A.K. Chopra, P. Giorgini, and J. Mylopoulos Adaptation in open systems: giving interaction its rightful place Proceedings of the 29th International Conference on Conceptual Modeling LNCS vol. 6412 2010 31 45
23. D. Gollmann Computer Security 3rd edition 2011 John Wiley & Sons
24. C.P. Pfleeger, and S.L. Pfleeger Analyzing Computer Security: A Threat/Vulnerability/Countermeasure Approach 2012 Prentice Hall
25. R. Kissel Glossary of key information security terms Tech. Rep. IR 7298 Rev 1 2011 NIST
26. BS ISO/IEC 27005:2011 Tech. rep. 2011 ISO/IEC
27. E. Paja, F. Dalpiaz, M. Poggianella, P. Roberti, and P. Giorgini STS-Tool: socio-technical security requirements through social commitments Proc. of RE'12 2012 331 332
28. E. Paja, F. Dalpiaz, and P. Giorgin Identifying conflicts in security requirements with STS-ml Tech. Rep. DISI-12-041 2012 University of Trento (http://disi.unitn.it/paja/tr-identifying-sec-conflicts.pdf)
29. G. Elahi, and E. Yu A goal oriented approach for modeling and analyzing security trade-offs Proceedings of the 26th International Conference on Conceptual Modeling LNCS vol. 4801 2007 375 390
30. A. van Lamsweerde, R. Darimont, and E. Letier Managing conflicts in goal-driven requirements engineering IEEE Trans. Softw. Eng. 24 11 1998 908 926
31. A. Fuxman, M. Pistore, J. Mylopoulos, and P. Traverso Model checking early requirements specifications in Tropos Proceedings of the 5th IEEE International Symposium on Requirements Engineering 2001 174 181
32. P. Giorgini, J. Mylopoulos, E. Nicchiarelli, and R. Sebastiani Reasoning with goal models Proceedings of the 21st International Conference on Conceptual Modeling LNCS vol. 2503 2002 167 181
33. P. Giorgini, J. Mylopoulos, and R. Sebastiani Goal-oriented requirements analysis and reasoning in the Tropos methodology Eng. Appl. Artif. Intell. 18 2 2005 159 171
34. J. Horkoff, and E. Yu Evaluating goal achievement in enterprise modeling - an interactive procedure and experiences The Practice of Enterprise Modeling 2009 Springer 145 160
35. J. Horkoff, and E. Yu Finding solutions in goal models: an interactive backward reasoning approach Proceedings of the 29th International Conference on Conceptual Modeling LNCS vol. 6412 2010 59 75
36. E. Yu Modelling Strategic Relationships for Process Reengineering (Ph.D. thesis) 1996 University of Toronto Canada
37. R. De Landtsheer, and A. Van Lamsweerde Reasoning about confidentiality at requirements engineering time Proceedings of the 13th ACM SIGSOFT International Symposium on the Foundations of Software Engineering 2005 41 49
38. M. Jackson Problem Frames: Analysing and Structuring Software Development Problems 2001 Addison-Wesley
39. S. Gürses Multilateral Privacy Requirements Analysis in Online Social Networks (Ph.D. thesis) May 2010 HMDB, Department of Computer Science KU Leuven, Belgium
40. B. Berendt More than modelling and hiding: towards a comprehensive view of Web mining and privacy Data Min. Knowl. Disc. 24 3 2012 697 737
41. S. Liaskos, S.A. McIlraith, S. Sohrabi, and J. Mylopoulos Integrating preferences into goal models for requirements engineering 18th IEEE International Requirements Engineering Conference 2010 IEEE 135 144
42. S. Liaskos, S.A. McIlraith, S. Sohrabi, and J. Mylopoulos Representing and reasoning about preferences in requirements engineering Requir. Eng. 16 3 2011 227 249