Security and privacy requirements analysis within a social setting

Proceedings of the IEEE International Conference on Requirements Engineering

Volumn 2003-January, Issue , 2003, Pages 151-161

  Liu, L ^a   Yu, E ^a   Mylopoulos, J ^a  

^a UNIVERSITY OF TORONTO   (Canada)

Author keywords

Privacy

Indexed keywords

ACCESS CONTROL; DATA PRIVACY; DECISION MAKING; MODELING LANGUAGES; REQUIREMENTS ENGINEERING;

AGENT-ORIENTED REQUIREMENTS; COUNTERMEASURE ANALYSIS; DYNAMIC DECISION MAKING; HEALTH INFORMATION SYSTEMS; METHODOLOGICAL FRAMEWORKS; ORGANIZATIONAL RELATIONSHIPS; SECURITY IMPLEMENTATIONS; VULNERABILITY ANALYSIS;

MODEL CHECKING;

EID: 84942866002     PISSN: 1090705X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICRE.2003.1232746     Document Type: Conference Paper

References (25)

1. Anderson, R. A Security Policy Model for Clinical Information Systems. IEEE Symposium on Security and Privacy, Los Alamitos, 1996. pp.30-43.
2. Earp, J.B., Reese, A. Analyzing Website Privacy Requirements Using a Privacy Goal Taxonomy. IEEE Joint International Requirements Engineering Conference (RE'02). Essen, Germany, September 9-13, 2002.pp.23-31
3. th Int. Conf. Advanced Information Systems Engineering, Collette Rolland, Francois Bodart, Corine Cauvet (Eds.). Springer, 1993. pp.234-251
4. Chung, L., Nixon, B. A., Yu, E. and Mylopoulos, J. Non-Functional Requirements in Software Engineering. Kluwer Academic Publishers, 2000.
5. Crook, R., Ince, D., Lin, L., Nuseibeh, B. Security Requirements Engineering: When Anti-requirements Hit the Fan. IEEE Joint International Requirements Engineering Conference (RE'02). Essen, Germany, September 9-13, 2002.pp.203-205.
6. Devanbu, P., Gertz, M, Martel, C., Stubblebine, S.G. Authentic Data publication over the Internet. Journal of Computer Security. Also available at: http://sirius.cs.ucdavis.edu/publications/jcs1.pdf.
7. Fuxman, A., Pistore, M., Mylopoulos, J., and Traverso, P. Model Checking Early Requirements Specifications in Tropos, 5th IEEE Int. Symposium on Requirements Engineering (RE'01), Toronto, August 2001. pp.174-181.
8. Giorgini, P., Mylopoulos, J., Nicchiarelli, E., Sebastiani, R.. Reasoning with Goal Models. 21th International Conference on Conceptual Modeling (ER-2002). Tampere, Finland, October 167-181, 2002. LNCS 2503 Springer Verlag. pp. 232-246.
9. Helmer, G., Wong, J., Slagell, M., Honavar, V. Miller, L., Lutz, R. A Software Fault Tree Approach to Requirements Analysis of an Intrusion Detection System. Anton, A. eds. Special Issue on Requirements Engineering for Information Security. Loucopoulos, P., Mylopoulos, J. eds. Requirements Engineering. Vol. 7, No. 4, 2002. pp. 177-220.
10. th IEEE Int. Requirements Engineering Conference (RE'03). Monterey Bay, California USA, Sept. 8-12, 2003.
11. Jackson, D. Alloy: A Lightweight Object Modeling Notation. ACM Transactions on Software Engineering and Methodology (TOSEM), Vol. 11, Issue 2, April 2002. pp. 256-290.
12. Leveson, N. Safeware: System Safety and Computers. Addison-Wesley Publishing Company. 1995.
13. Liu, L., Yu, E., Mylopoulos, J. Analyzing Security Requirements as Relationships Among Strategic Actors. 2nd Symposium on Requirements Engineering for Information Security (SREIS'02). Raleigh, North Carolina, October 16, 2002.
14. th IEEE Annual Computer Security Applications Conference. 1999.
15. Mylopoulos, J., Borgida, A., Jarke, M. and Koubarakis, M. Telos: Representing Knowledge About Information Systems. ACM Transactions on Information Systems 8(4), October 1990.
16. Sandhu, R. S., Coyne, E.J., Feinstein, H.L., Youman, C.E. Role-Based Access Control Models. IEEE Computer, Vol.29, No.2, Feburary 1996. pp. 38-47.
17. Sandhu, R. eds. Special Issue: The Technology of Trust. IEEE Internet Computing, November/December 2002. pp. 28-53.
18. Schneier, B. Attack Trees Modeling Security Threats. Dr. Dobb's Journal, December 1999. Also available at:http://www.counterpane.com/attacktrees-ddj-ft.html.
19. th International Workshop on Requirements Engineering, Foundation for Software Quality (REFSQ'2001), Switzerland, June 4-5, 2001.
20. Szolovits, P., Doyle, J., Long, W.J. Guardian Angel: Patient-Centered Health Information Systems. Technical Report MTT/LCS/TR-604. Available at: http://www.ga.org/ga.
21. van Lamsweerde, A. and Letier, E. Handling Obstacles in Goal-oriented Requirements Engineering. IEEE Transactions on Software Engineering, 26(10). 2000.
22. Yu, E. Towards Modeling and Reasoning Support for Early-Phase Requirements Engineering. Proceedings of the 3rd IEEE International Symposium on Requirements Engineering (RE'97) Jan. 6-8, 1997, Washington D.C., USA. pp.226-235.
23. Yu, E., Cysneiros, L. Designing for Privacy and Other Competing Requirements. 2nd Symposium on Requirements Engineering for Information Security (SREIS'02). Raleigh, North Carolina, October 16, 2002.
24. Yu, E. and Liu, L. Modeling Trust for System Design Using the i∗ Strategic Actors Framework. In: Trust in Cyber-Societies - Integrating the Human and Artificial Perspectives. R. Falcone, M. Singh, Y.H. Tan, eds. LNAI-2246. Springer,2001. pp. 175-194.
25. Yu, E., Liu, L., Li, Y. Modeling Strategic Actor Relationships to Support Intellectual Property Management. 20th International Conference on Conceptual Modeling (ER-2001). Yokohama, Japan, November 27-30, 2001. LNCS 2224 Spring Verlag. pp. 164-178.