Towards the Integration of Security Aspects into System Development Using Collaboration-Oriented Models

Security is an important feature of system design which should be taken into account early in the development of systems. We propose an extension of the SPACE engineering method in order to integrate security aspects into the system design and implementation. The integration of security mechanisms is facilitated by collaboration-oriented models of the functional system specification (i.e., by describing functionalities reaching over different physical components in one model). Countermeasures are also modeled by collaborations since security mechanisms are often collaborative structures themselves. Our approach includes an asset-oriented security analysis on the collaboration-oriented models in order to determine the level of protection needed. We illustrate our approach by the example of an e-sale system.