From Trust to Dependability through Risk Analysis

Authors:
Yudistira Asnar;Paolo Giorgini;Fabio Massacci;Nicola Zannone
Affiliations:
University of Trento;University of Trento;University of Trento;University of Trento
Venue:
ARES '07 Proceedings of the The Second International Conference on Availability, Reliability and Security
Year:
2007

Citing 0
Cited 9

Measuring network security using dynamic bayesian network

Proceedings of the 4th ACM workshop on Quality of protection
Perceived risk assessment

Proceedings of the 4th ACM workshop on Quality of protection
GoCoMM: a governance and compliance maturity model

Proceedings of the first ACM workshop on Information security governance
Legal Patterns Implement Trust in IT Requirements: When Legal Means are the "Best" Implementation of IT Technical Goals

RELAW '09 Proceedings of the 2009 Second International Workshop on Requirements Engineering and Law
A risk-aware resource service decision strategy for global computing

ATC'10 Proceedings of the 7th international conference on Autonomic and trusted computing
Deriving business processes with service level agreements from early requirements

Journal of Systems and Software
Sociotechnical trust: an architectural approach

ER'11 Proceedings of the 30th international conference on Conceptual modeling
Threat and Risk-Driven Security Requirements Engineering

International Journal of Mobile Computing and Multimedia Communications
Trust-based specification of sociotechnical systems

Data & Knowledge Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

The importance of critical systems has been widely recognized and several efforts are devoted to integrate dependability requirements in their development process. Such efforts result in a number of models, frameworks, and methodologies that have been proposed to model and assess the dependability of critical systems. Among them, risk analysis considers the likelihood and severity of failures for evaluating the risk affecting the system. In our previous work, we introduced the Tropos Goal- Risk framework, a formal framework for modeling, assessing, and treating risks on the basis of the likelihood and severity of failures. In this paper, we refine this framework introducing the notion of trust for assessing risks on the basis of the organizational setting of the system. The assessment process is also enhanced to analyze risks along trust relations among actors. To make the discussion more concrete, we illustrate the framework with a case study on partial airspace delegation in Air Traffic Management system.