Modelling and reasoning about security requirements in socio-technical systems
نویسندگان
چکیده
منابع مشابه
Modelling and reasoning about security requirements in socio-technical systems
Modern software systems operate within the context of larger socio-technical systems, wherein they interact—by exchanging data and outsourcing tasks—with other technical components, humans, and organisations. When interacting, these components (actors) operate autonomously; as such, they may disclose confidential information without being authorised, wreck the integrity of private data, rely on...
متن کاملModelling Security Requirements in Socio-Technical Systems with STS-Tool
Security Requirements Engineering (SRE) deals with the specification of security requirements for the system-to-be starting with the analysis of security issues as soon as in the early requirements phase. STS-ml is an actorand goaloriented requirements modelling language for Socio-Technical Systems (STSs), which represents the security needs the stakeholders express as constraints over the inte...
متن کاملSTS-Tool: Specifying and Reasoning over Socio-Technical Security Requirements
STS-Tool is the modelling and analysis support tool for STSml, our proposed actorand goal-oriented security requirements modelling language for Socio-Technical Systems (STSs). STS-Tool allows designers to model an STS through high-level primitives, to express security constraints over the interactions between the actors in the STS, as well as to derive security requirements once the modelling i...
متن کاملManaging Security Requirements Conflicts in Socio-Technical Systems
Requirements are inherently prone to conflicts, for they originate from stakeholders with different, often opposite, needs. Security requirements are no exception. Importantly, their violation leads to severe effects, including privacy infringement, legal sanctions, and exposure to security attacks. Today’s systems are Socio-Technical Systems (STSs): they consist of autonomous participants (hum...
متن کاملPreserving Compliance with Security Requirements in Socio-Technical Systems
Socio-technical systems are an interplay of social (humans and organizations) and technical components interacting with one another to achieve their objectives. Security is a central issue in such complex systems, and it cannot be tackled only through technical mechanisms: the encryption of sensitive data while being transmitted, does not assure that the receiver will not disclose them to unaut...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Data & Knowledge Engineering
سال: 2015
ISSN: 0169-023X
DOI: 10.1016/j.datak.2015.07.007