A Goal-Based Modeling Approach to Develop Security Requirements of Fault Tolerant Security-Critical Systems
Paper
Paper/Presentation Title | A Goal-Based Modeling Approach to Develop Security Requirements of Fault Tolerant Security-Critical Systems |
---|---|
Presentation Type | Paper |
Authors | Mougouei, Davoud, Moghtadaei, Mohammad and Moradmand, Somayeh |
Journal or Proceedings Title | Proceedings of the 2012 International Conference on Computer and Communication Engineering (ICCCE 2012) |
Journal Citation | pp. 200-205 |
Article Number | 6271180 |
Page Range | 200-205 |
Number of Pages | 6 |
Year | 2012 |
Publisher | IEEE (Institute of Electrical and Electronics Engineers) |
Place of Publication | United States |
ISBN | 9781467304788 |
Digital Object Identifier (DOI) | https://doi.org/10.1109/ICCCE.2012.6271180 |
Web Address (URL) of Paper | https://ieeexplore.ieee.org/document/6271180 |
Web Address (URL) of Conference Proceedings | https://ieeexplore.ieee.org/xpl/conhome/6263317/proceeding |
Conference/Event | 2012 International Conference on Computer and Communication Engineering (ICCCE 2012) |
Event Details | 2012 International Conference on Computer and Communication Engineering (ICCCE 2012) Parent International Conference on Computer and Communication Engineering (ICCCE) Delivery In person Event Date 03 to end of 05 Jul 2012 Event Location Kuala Lumpur, Malaysia |
Abstract | Large amount of (security) faults existing in software systems could be complex and hard to identify during the fault analysis. So, it is not always possible to fully mitigate the internal or external security faults (vulnerabilities or threats) within the system. On the other hand, existence of faults in the system may eventually lead to a security failure. To avoid security failure of the target system we need to make it flexible and tolerant in the presence of security faults. This paper introduces a goal-based modeling approach to develop security requirements of security-critical systems (SCSs) by explicitly factoring the faults into the requirement engineering process. Our approach establishes a model for security requirements (SRM) with respect to the formally described model of security faults (SFM). We care for fault tolerance in SRM by taking into consideration partial satisfaction of security goals. The proposed approach factors this partiality into the goals by applying proper mitigation techniques during the refinement process. This eventually contributes to a fault tolerant model for security requirements of the target system. © 2012 IEEE. |
Keywords | intrusion tolerance; security fault; threat; vulnerability |
Contains Sensitive Content | Does not contain sensitive content |
Public Notes | There are no files associated with this item. |
Byline Affiliations | University of Putra Malaysia, Malaysia |
Islamic Azad University, Iran | |
Library Services |
https://research.usq.edu.au/item/yy894/a-goal-based-modeling-approach-to-develop-security-requirements-of-fault-tolerant-security-critical-systems
50
total views0
total downloads0
views this month0
downloads this month