2008 Third International Conference on Availability, Reliability and Security Goal-Oriented, B-Based Formal Derivation of Security Design Specifications from Security Requirements March 04-March 07 ISBN: 978-0-7695-3102-1
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ARES.2008.77
This paper proposes a requirements-driven security engineering approach for analyzing application-specific security requirements that are formally derived into security design preserving security requirements properties. The approach adopts the KAOS framework to formally construct a complete and consistent security requirements model that is extended using the B method to produce security design and further implementation while preserving requirements properties. This unique treatment of secure software engineering is systematic, constructive and considers security early in development.
Index Terms:
Goal-oriented security requirements engineering, formal methods, design specifications, threat models, attack analysis
Citation:
Riham Hassan, Shawn Bohner, Sherif El-Kassas, Mohamed Eltoweissy, "Goal-Oriented, B-Based Formal Derivation of Security Design Specifications from Security Requirements," ares, pp.1443-1450, 2008 Third International Conference on Availability, Reliability and Security, 2008 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb