Enhanced misuse case model: a security requirement analysis and specification model

  • Authors:
  • Sang-soo Choi;So-yeon Kim;Gang-soo Lee

  • Affiliations:
  • Korea Institute of Science and Technology Information, Daejon, Korea;Dept. of Computer Science, Chungju National University, Chungju, Korea;Dept. Of Computer Science, Hannam University, Daejon, Korea

  • Venue:
  • ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part V
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

An information security system of public or private organization should be developed securely and cost-effectively by using security engineering and software engineering technologies, as well as a security requirement specification (SRS). We present the E-MUC model that is analysis and specification model of security requirement based on UML, and a development process by using E-MUC model. Our approach is based on the paradigm of Common Criteria (ISO/IEC 15408), that is an international evaluation criteria for information security products, and PP which is a common security functional requirement specification for specific types of information security product.