Scipediacontent: Scipediacontent moved page Draft Content 178224785 to Meland et al 2013a

2021-02-08T09:12:40Z

Scipediacontent moved page Draft Content 178224785 to Meland et al 2013a

Scipediacontent: Created page with " == Abstract == Both goal and threat modelling are well-known activities related to high-level requirements engineering. While goals express why a system is needed, threats t..."

2021-02-08T09:12:36Z

Created page with " == Abstract == Both goal and threat modelling are well-known activities related to high-level requirements engineering. While goals express why a system is needed, threats t..."

New page

== Abstract ==

Both goal and threat modelling are well-known activities related to high-level requirements engineering. While goals express why a system is needed, threats tell us why security for our system is needed. Still, you will often find that goals and threats are treated in separate modelling processes, perhaps not being influenced by each other at all. The research question we try to address in here is to what extent should we include threats in goal-oriented modelling? There is for instance a trade-off between expressiveness, usability and usefulness that must be considered. To improve this situation we believe that a well-defined methodology with good tool support will make the modelling process easier, and give a more useful result. In this paper we first give an overview of previous work on the use of threats within goal-modelling. We explain the use of threats within a goal-oriented socio-technical security modelling language and how tool support enables reuse of threats and automatic analysis of threat propagation in the models. This is exemplified with a case study from Air Traffic Management (ATM) from which we extract some of the the practical challenges that we have. We are able to conclude that threats provide a useful foundation and justification for the security requirements we derive from goal modelling, but this should not be considered to be a replacement for risk assessment methods. Having goals and threats before thinking of the technical solutions of a system allows us to raise awareness on situations that are not just exceptions from regular execution flow.

== Original document ==

The different versions of the original document can be found in:

* [http://dx.doi.org/10.1109/ARES.2013.57 http://dx.doi.org/10.1109/ARES.2013.57]

* [http://xplorestaging.ieee.org/ielx7/6656131/6657192/06657273.pdf?arnumber=6657273 http://xplorestaging.ieee.org/ielx7/6656131/6657192/06657273.pdf?arnumber=6657273],
: [http://dx.doi.org/10.1109/ares.2013.57 http://dx.doi.org/10.1109/ares.2013.57]

* [https://dblp.uni-trier.de/db/conf/IEEEares/ares2013.html#MelandGP13 https://dblp.uni-trier.de/db/conf/IEEEares/ares2013.html#MelandGP13],
: [https://ieeexplore.ieee.org/document/6657273 https://ieeexplore.ieee.org/document/6657273],
: [http://ieeexplore.ieee.org/document/6657273 http://ieeexplore.ieee.org/document/6657273],
: [https://www.researchgate.net/profile/Stephane_Paul2/publication/261338189_The_Use_and_Usefulness_of_Threats_in_Goal-Oriented_Modelling/links/5559915d08ae6943a876c3a8.pdf?disableCoverPage=true https://www.researchgate.net/profile/Stephane_Paul2/publication/261338189_The_Use_and_Usefulness_of_Threats_in_Goal-Oriented_Modelling/links/5559915d08ae6943a876c3a8.pdf?disableCoverPage=true],
: [https://dl.acm.org/citation.cfm?id=2545231 https://dl.acm.org/citation.cfm?id=2545231],
: [https://academic.microsoft.com/#/detail/2086416991 https://academic.microsoft.com/#/detail/2086416991]

← Older revision	Revision as of 09:12, 8 February 2021
(No difference)

Meland et al 2013a - Revision history

Scipediacontent: Scipediacontent moved page Draft Content 178224785 to Meland et al 2013a

Scipediacontent: Created page with " == Abstract == Both goal and threat modelling are well-known activities related to high-level requirements engineering. While goals express why a system is needed, threats t..."