Trust-terms ontology for defining security requirements and metrics

  • Authors:
  • Kieran Sullivan;Jim Clarke;Barry P. Mulcahy

  • Affiliations:
  • Waterford Institute of Technology, Ireland;Waterford Institute of Technology, Ireland;Waterford Institute of Technology, Ireland

  • Venue:
  • Proceedings of the Fourth European Conference on Software Architecture: Companion Volume
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Security and privacy, accountability and anonymity, transparency and unobservability: these terms and more are vital elements for defining the overall security requirements---and, thus, security measurability criteria---of systems. However, these distinct yet related concepts are often substituted for one another in our discussions on securing trustworthy systems and services. This is damaging since it leads to imprecise security and trust requirements. Consequently, this results in poorly defined metrics for evaluating system security. This paper proposes a trust-terms ontology, which maps out and defines the various components and concepts that comprise ICT security and trust. We can use this ontology tool to gain a better understanding of their trust and security requirements and, hence, to identify more precise measurability criteria.