Using Security and Domain ontologies for Security Requirements ... - Hal

Recommend Documents

Ontologies for Security Requirements: A Literature Survey and ... - Hal

Jun 18, 2012 - resources of an IS to ensure information availability, confidentiality, integrity, ... security requirements engineering frameworks derive security ...

Ontologies for Security Requirements: A Literature Survey and ...

Jun 18, 2012 - Security of Information Systems (IS) has progressively become a very ... The rest of the paper is organized as follows: in Section 2 we explain.

Ontologies for Security Requirements: A Literature Survey and ...

Jun 18, 2012 - Security of Information Systems (IS) has progressively become a very .... Recent trends in security methodologies tend to consider that the best approach of ... that might occur in application programs for database management, electron

DODT: Increasing Requirements Formalism using Domain Ontologies ...

Hull, Jackson and Dick [8] first used the term boilerplate to refer to a textual ..... [8] E. Hull, K. Jackson, and J. Dick, Requirements Engineering. Springer,. 2005.

A Security Ontology for Security Requirements ...

Keywords: Security, ontology, concepts, security requirements, elicitation. 1 Introduction. Security has moved from being considered by Information Systems (IS) ...

Security Requirements Engineering Support for Security ... - UniTN

Security Requirements Engineering Support for. Security-Annotated Business Processes. Elda Paja1, Paolo Giorgini1, StÃ©phane Paul2, and Per HÃ¥kon ...

Requirements Engineering Security Requirements

However, no guidelines on password strength are given. ... Only some security testing is aimed at a functional level; i.e. if user enters incorrect pass- ..... The Open Web Application Security Project (OWASP) 2010 list the number 1 security.

CLOUD SECURITY REQUIREMENTS ANALYSIS AND SECURITY ...

Security continues to be a major challenge for cloud computing, and it is one that ... secure a cloud; however, no integrated model-based methodology is yet available to ..... use cases, which describe what a system should do, to misuse cases, ... an

CLOUD SECURITY REQUIREMENTS ANALYSIS AND SECURITY

who must understand and observe this policy in order to perform their job are .... authorized user's badge enters the network operations center (NOC). ..... data access misuse case is decomposed here to find determine how such a setup ..... Masters i

A Domain-Independent Model for Identifying Security Requirements

weakness enumeration; domain-independent; one-class svm. I. INTRODUCTION ..... [12] MITRE, âCWE - CWE-416: Use After Free (2.10),â http://cwe.mitre.

software security requirements for military

Keywords: computer generated actors, software security, software architectures, CGF software protection .... To frame the solution ..... [2] Deursen, A. and Burd, E. (2002) 9th Working Conference on ... Exposed: Network Security Secrets and Solutions

security for the rest of us Security Requirements for ...

Mar 21, 2008 - show that several standards (such as the Common. Criteria and the US ... of function leaves out key information: what objects need protecting ... an overriding security policy.â He suggests .... Choose a security policy, which incl

Maintaining Security Requirements of Software Systems using ...

Security requirements are concerned with protecting assets of a system from .... formation Management System (PIM) and FTP-server to implement security re-.

Integrating Security Patterns with Security Requirements Analysis

not been integrated with existing security requirements analysis techniques, ..... security pattern, in which the security problem occurs and is being solved. We model ..... data communicate network. Energy. Management. System. Low cost. Hurt.

Security, Privacy and Usability Requirements for ...

May 25, 2012 - with BrowserID using any one of a host of email providers. The BrowserID ..... well make use of that data for marketing purposes, or share.

Performance and Security Requirements for Complex Applications

Keywords: Performance, Complex Application, Mobile Application, Security, Innovation,. COIMA. Complex ... server;. â¢ applications with network communication, are applications through which users ... like Pearl, PHP, Ruby and Python, software server

Eliciting Security Requirements

Mar 5, 2008 - AOSD (Aspect-Oriented Software Development). ï¼Suitable for Non-functional Requirements (NFR). âSilver bullet? Our research: Attempts to ...

Software Security Requirements Gathering

In the rest of the paper, we first present a brief overview of .... and above having Linux supporting Redhat Linux EL4 and above as operating system.

A Review of Security Requirements Engineering Methods ... - HAL-Inria

Nov 28, 2016 - Springer, Lecture Notes in Computer Science, LNCS-8708, pp.79-93, 2014, ..... standard, which is related to information security management.

An Extended Ontology for Security Requirements - DISI Security ...

1 Department of Information Engineering and Computer Science, University of ... have their advantages: with goal-oriented security requirements analysis, mali-.

Security and the Digital Domain

Nov 25, 2008 - Use, Preservation and Disposal of Unique Information Objects in ..... include digital signatures, checksums and hashes,1 all of which can be used .... the web servers of e-retailers such as Amazon.com or the online sales sites.

Security requirements analysis based on security and ...

Sep 20, 2013 - Security requirements analysis based on security and ... information systems development process, and especially the need to consider ... ontology are not specific to the target [bank] industryâ (the case study was in the.

Security Requirements for Management Systems using Mobile Agents

provide a virtual machine or interpreter to run mobile agents ... classification of attacks follows in section 3. Instead ... and calling relations, e.g. a mobile agent calls interface func- .... information paving the way for further attacks or to s

Using Abuse Case Models for Security Requirements ... - CiteSeerX

develop software that requires security features. When these practitioners develop software solutions without ..... A good abuse case model will have uniform.

Using Security and Domain ontologies for Security Requirements ... - Hal

Download PDF

5 downloads 1159 Views 851KB Size Report

Comment

Sep 20, 2013 - importance of considering security during Requirements. Engineering (RE) ... in the RITA ontology are not specific to the target [bank] industryâ. Experts ..... The input models contain many information about resources, some of ...

Using Security and Domain ontologies for Security Requirements Analysis Amina Souag, Camille Salinesi, Isabelle Wattiau, Haralambos Mouratidis

To cite this version: Amina Souag, Camille Salinesi, Isabelle Wattiau, Haralambos Mouratidis. Using Security and Domain ontologies for Security Requirements Analysis. The 8th IEEE International Workshop on Security, Trust and Privacy for Software Applications in conjunction with COMPSAC, the IEEE Signature Conference on Computers, Software & Application., Jul 2013, Kyoto, Japan. pp.1-7.

HAL Id: hal-00864300 https://hal-paris1.archives-ouvertes.fr/hal-00864300 Submitted on 20 Sep 2013

HAL is a multi-disciplinary open access archive for the deposit and dissemination of scientific research documents, whether they are published or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.

L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche fran¸cais ou étrangers, des laboratoires publics ou privés.

!"#$%&'()*+#,-&.$/&012.#$&1$,131%#("&41+&'()*+#,-& 5(6*#+(2($,"&7$.3-"#" !"#$%&'()%*+&,%"#--.&'%-#$./#+&,01+&&2%$345($&'(67($$.& 8$#9.6/#3:&& 2%6#/+&;6%$/%-#$./#?"%-#@>)$#9AB%6#/C>D6&& &

1/%7.--.&E%33#%)+&,FG01,A,H!I&J&F''F,&K)/#$.//& 'I()6%3#O#/M).->%)R

78",+.),!" #$%$&'" ($)$*(%+" +*)" *(,-$." */0-'" '+$" 1230('*&%$" 04" %0&)1.$(1&," )$%-(1'5" .-(1&," #$6-1($2$&')" 7&,1&$$(1&," 8#79" )'*,$:" ;1'$(*'-($" *&'0! I)-3#AP.9.-&G("%#$&T$3(-(*:&

N*(')"04".02*1&" 0&'0! 20T2T'1S1TH& T)6& ".34(O& *)#O./& 34.& O#/! I.34(O&T9.69#.L&&

G)6#$*&34.&O("%#$&/B.+&!//.3Y& XS%/R+&0.//()6&'0& UhV& !>& '()%*+& ,>& '%-#$./#+& .3& 1>& ,(":$AE%33#%)+& x&T$3(-(*#./& D(6& '.&\.[d>& UCeV&G>& K]z6$.6+& x&G("%#$& F$*#$..6#$*&y+& #$& 7)+ 4B5+ [!B5+ 5&3()6/,C+R&-0./&+]$0&,+()+B$3K.0&/+5-(&)-&C+0:&+4B5+[!B++ 5&/(&,+&\eeh>& UC[V&I>&'4#7%(R%+&N>&Q%#:%+&.3&I>&'%.R#+&x&oTT0F `&o(%-A T6#.$3.O&%$O&T$3(-(*:&G6#9.$&0.Z)#6.".$3/&F-#&\\g.\[d>& UCdV&N>& Q%#:%& .3& I>& '%.R#+& x&8/#$*& G("%#$& T$3(-(*:& %/& G("%#$& Q$(L-.O*.& D(6& 0.Z)#6.".$3/& F-#&'#$O6.+&.3&S>&I(/.6+&x&T$3(-(*:AK%/.O& ')BB(63& D(6& '.& G#--($+& ~O>& 'B6#$*.6& K.6-#$& N.#O.-7.6*+&\eC\+&B>&CndA\eh>& UCmV& & '>& G6#3/%/+& +& P>& o:"$(B()-(/+& I>& Q%6:O%+& S>& K%-(B()-(/+& '>& Q(R(-%R#/+& ,>& P%"76#$()O%R#/+& %$O& '>& Q%3/#R%/>& f!& R$(L-.O*.A7%/.O& %BB6(%