Designing Security Requirements Models through Planning

Bryl, Volha and Massacci, Fabio and Mylopoulos, John and Zannone, Nicola (2006) Designing Security Requirements Models through Planning. UNSPECIFIED.

[img]
Preview
PDF
Download (306Kb) | Preview

    Abstract

    The quest for designing secure and trusted software has led to refined Software Engineering methodologies that rely on tools to support the design process. Automated reasoning mechanisms for requirements and software verification are by now a well-accepted part of the design process, and model driven architectures support the automation of the refinement process. We claim that we can further push the envelope towards the automatic exploration and selection among design alternatives and show that this is concretely possible for Secure Tropos, a requirements engineering methodology that addresses security and trust concerns. In Secure Tropos, a design consists of a network of actors (agents, positions or roles) with delegation/permission dependencies among them. Accordingly, the generation of design alternatives can be accomplished by a planner which is given as input a set of actors and goals and generates alternative multiagent plans to fulfill all given goals.We validate our claim with a case study using a state-of-the-art planner.

    Item Type: Departmental Technical Report
    Department or Research center: Information Engineering and Computer Science
    Subjects: Q Science > QA Mathematics > QA076 Computer software
    Report Number: DIT-06-003
    Repository staff approval on: 19 Jul 2007

    Actions (login required)

    View Item