Extracting Security Requirements from Reality

摘要：

In recent years, research efforts have been aimed at providing methodologies and techniques for secure software engineering. In this direction, UMLsec is proposed as a standard extension of UML for expressing security-relevant information. This paper scrutinizes this proposed method for security requirements specification and develops a different basic methodology that can be used for the stated purpose. The paper demonstrates that security considerations need completeness and continuity of specifications to avoid gaps or breaks in the logical sequence of events in systems. Accordingly, the paper presents a flow-based systematic diagramming scheme suitable for these features. We demonstrate the concepts with examples.

关键词： UML UMLsec conceptual modeling activity diagrams flow model Security requirements

作者: Sabah Al-Fedaghi Khalid Assaf AI-Enazi

作者单位: Computer Engineering Department Kuwait University Kuwait

会议类型: 国际会议

会议名称: 2011 3rd IEEE International Conference on Computer Research and Development(ICCRD 2011)(2011第三届计算机研究与发展国际会议)

会议地点: 上海

会议语种:英文

页码: 221-228

在线出版日期: 2011-03-11（万方平台首次上网日期，不代表论文的发表时间）