Paper Info
Title
Model-based privacy and security analysis with CARiSMA
Abstract
We present CARiSMA, a tool that is originally designed to support model-based security analysis of IT systems. In our recent work, we added several new functionalities to CARiSMA to support the privacy of personal data. Moreover, we introduced a mechanism to assist the system designers to perform a CARiSMA analysis by automatically initializing an appropriate CARiSMA analysis concerning security and privacy requirements. The motivation for our work is Article 25 of Regulation (EU) 2016/679, which requires appropriate technical and organizational controls must be implemented for ensuring that, by default, the processing of personal data complies with the principles on processing of personal data. This implies that initially IT systems must be analyzed to verify if such principles are respected. System models allow the system developers to handle the complexity of systems and to focus on key aspects such as privacy and security. CARiSMA is available at http://carisma.umlsec.de and our screen cast at https://youtu.be/b5zeHig3ARw.
Year
DOI
Venue
2017
10.1145/3106237.3122823
ESEC/SIGSOFT FSE
Keywords
Field
DocType
System design analysis,Model-based analysis,Privacy,Security
Software engineering,Computer security,Information technology,Computer science,Security analysis,Initialization
Conference
ISBN
Citations 
PageRank 
978-1-4503-5105-8
5
0.43
References 
Authors
19
4
Name
Order
Citations
PageRank
Amir Shayan Ahmadian1182.68
Sven Peldszus2155.76
Qusai Ramadan3111.84
Jan Jurjens416916.07