An Aspect-Oriented Approach to Security Requirements Analysis

Authors:
Dianxiang Xu;Vivek Goel;Kendall Nygard
Affiliations:
North Dakota State University, USA;North Dakota State University, USA;North Dakota State University, USA
Venue:
COMPSAC '06 Proceedings of the 30th Annual International Computer Software and Applications Conference - Volume 02
Year:
2006

Citing 0
Cited 3

Generation of test requirements from aspectual use cases

Proceedings of the 3rd workshop on Testing aspect-oriented programs
A High-level Aspect-oriented-based Framework for Software Security Hardening

Information Security Journal: A Global Perspective
Towards HIPAA-compliant healthcare systems

Proceedings of the 2nd ACM SIGHIT International Health Informatics Symposium

Quantified Score

Hi-index	0.01

Visualization

Abstract

This paper presents an aspect-oriented approach to integrated elicitation of functional and security requirements based on use case-driven development. We identify security threats with respect to use cases and adopt threat mitigations for preventing or reducing security threats. To capture crosscutting nature of threats and mitigations, we specify them as aspects that encapsulate pointcuts and advice. A threat (mitigation) pointcut is a collection of join points in use cases at which the use cases are threatened (secured); whereas threat/mitigation advice describes how a threat can become an attack (can be mitigated). Eliciting threats and mitigations as aspects provides a structured way for separating functional and security concerns.