A framework for specifying and managing security requirements in collaborative systems

Authors:
Stephen S. Yau;Zhaoji Chen
Affiliations:
Department of Computer Science and Engineering, Arizona State University, Tempe, AZ;Department of Computer Science and Engineering, Arizona State University, Tempe, AZ
Venue:
ATC'06 Proceedings of the Third international conference on Autonomic and Trusted Computing
Year:
2006

Citing 8
Cited 1

A translation approach to portable ontology specifications

Knowledge Acquisition - Special issue: Current issues in knowledge modeling
Writing Secure Code

Writing Secure Code
Dealing with Security Requirements During the Development of Information Systems

CAiSE '93 Proceedings of Advanced Information Systems Engineering
SecureUML: A UML-Based Modeling Language for Model-Driven Security

UML '02 Proceedings of the 5th International Conference on The Unified Modeling Language
Situation-Aware Contract Specification Language for Middleware for Ubiquitous Computing

FTDCS '03 Proceedings of the The Ninth IEEE Workshop on Future Trends of Distributed Computing Systems
Security quality requirements engineering (SQUARE) methodology

SESS '05 Proceedings of the 2005 workshop on Software engineering for secure systems—building trustworthy applications
An Adaptable Security Framework for Service-based Systems

WORDS '05 Proceedings of the 10th IEEE International Workshop on Object-Oriented Real-Time Dependable Systems
Support for situation awareness in trustworthy ubiquitous computing application software: Papers from COMPSAC 2004

Software—Practice & Experience

Security Policy Integration and Conflict Reconciliation for Collaborations among Organizations in Ubiquitous Computing Environments

UIC '08 Proceedings of the 5th international conference on Ubiquitous Intelligence and Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Although security has been recognized as an increasingly important and critical issue for software system development, most security requirements are poorly specified: ambiguous, misleading, inconsistent among various parts, and lacking sufficient details. In this paper, a framework for specifying unambiguous, interoperable security requirements and detecting conflict and undesirable emergent properties in collaborative systems is presented. The framework includes a core ontology representing hierarchical security requirements , an ontology-based security requirement specification process, a set of security requirement refining rules, an algorithm for automatic security requirement refinement and an analysis algorithm to detect inconsistent security requirements. In this paper, the specification and refinement of security requirements are emphasized.