Security asset elicitation for collaborative models

  • Authors:

  • Maria Vasilevskaya;Simin Nadjm-Tehrani;Linda Ariani Gunawan;Peter Herrmann

  • Affiliations:

  • Linköping University, Linköping, Sweden;Linköping University, Linköping, Sweden;Norwegian University of Science and Technology, Trondheim, Norway;Norwegian University of Science and Technology, Trondheim, Norway

  • Venue:
  • Proceedings of the Workshop on Model-Driven Security
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Building secure systems is a difficult job for most engineers since it requires in-depth understanding of security aspects. This task, however, can be assisted by capturing security knowledge in a particular domain and reusing the knowledge when designing applications. We use this strategy and employ an information security ontology to represent the security knowledge. The ontology is associated with system designs which are modelled in collaborative building blocks specifying the behaviour of several entities. In this paper, we identify rules to be applied to the elements of collaborations in order to identify security assets present in the design. Further, required protection mechanisms are determined by applying a reasoner to the ontology and the obtained assets. We exemplify our approach with a case study from the smart metering domain.