TY - GEN
T1 - Security requirements for tolerating security failures
AU - Shin, Michael
AU - Pathirage, Don
PY - 2017
Y1 - 2017
N2 - This paper describes security failure-Tolerant requirements, which tolerate the failures of security services that protect applications from security attacks. A security service, such as authentication, confidentiality or integrity security service, can be always broken down as advanced attack skills are coined. There is no security service that is forever secure. This paper describes an approach to developing the security failure-Tolerant use case that specifies the security requirements for tolerating the breaches of security services. A security failure-Tolerant use case is modeled along with application use case and security use case, and specified with application use case description. Threats to applications are identified and modeled to develop security failure-Tolerant requirements. Online shopping system is used for illustrating security failure-Tolerant requirements.
AB - This paper describes security failure-Tolerant requirements, which tolerate the failures of security services that protect applications from security attacks. A security service, such as authentication, confidentiality or integrity security service, can be always broken down as advanced attack skills are coined. There is no security service that is forever secure. This paper describes an approach to developing the security failure-Tolerant use case that specifies the security requirements for tolerating the breaches of security services. A security failure-Tolerant use case is modeled along with application use case and security use case, and specified with application use case description. Threats to applications are identified and modeled to develop security failure-Tolerant requirements. Online shopping system is used for illustrating security failure-Tolerant requirements.
KW - Application use case
KW - Security failure-Tolerant use case
KW - Security requirements
KW - Security use case
UR - http://www.scopus.com/inward/record.url?scp=85029505909&partnerID=8YFLogxK
U2 - 10.18293/SEKE2017-098
DO - 10.18293/SEKE2017-098
M3 - Conference contribution
AN - SCOPUS:85029505909
T3 - Proceedings of the International Conference on Software Engineering and Knowledge Engineering, SEKE
SP - 487
EP - 490
BT - Proceedings - SEKE 2017
PB - Knowledge Systems Institute Graduate School
T2 - 29th International Conference on Software Engineering and Knowledge Engineering, SEKE 2017
Y2 - 5 July 2017 through 7 July 2017
ER -