Paper Info
Title
Automating trade-off analysis of security requirements
Abstract
A key aspect of engineering secure systems is identifying adequate security requirements to protect critical assets from harm. However, security requirements may compete with other requirements such as cost and usability. For this reason, they may only be satisfied partially and must be traded off against other requirements to achieve \"good-enough security\". This paper proposes a novel approach to automate security requirements analysis in order to determine maximum achievable satisfaction level for security requirements and identify trade-offs between security and other requirements. We also propose a pruning algorithm to reduce the search space size in the analysis. We represent security concerns and requirements using asset, threat, and goal models, initially proposed in our previous work. To deal with uncertainty and partial requirements, satisfaction security concerns are quantified by leveraging the notion of composite indicators, which are computed through metric functions based on range normalisation. An SMT solver (Z3) interprets the models and automates the execution of our analyses. We illustrate and evaluate our approach by applying it to a substantive example of a service-based application for exchanging emails.
Year
DOI
Venue
2016
10.1007/s00766-015-0229-z
Requir. Eng.
Keywords
Field
DocType
Security requirements, Trade-off analysis, Goals
Security testing,Security engineering,Computer security,Computer science,Asset (computer security),Requirements elicitation,Security service,Requirements management,Security information and event management,Computer security model
Journal
Volume
Issue
ISSN
21
4
1432-010X
Citations 
PageRank 
References 
6
0.39
36
Authors
5
Name
Order
Citations
PageRank
Liliana Pasquale146830.04
Paola Spoletini259044.88
Mazeiar Salehie383134.30
Luca Cavallaro41549.20
Bashar Nuseibeh54201347.16