عرض بسيط للتسجيلة

المؤلفNhlabatsi, Armstrong
المؤلفKhan, Khaled MD
المؤلفHong, Jin B.
المؤلفKim, Dong Seong
المؤلفFernandez, Rachael
المؤلفFetais, Noora
تاريخ الإتاحة2024-03-10T05:42:08Z
تاريخ النشر2023
اسم المنشورIEEE Transactions on Cloud Computing
المصدرScopus
الرقم المعياري الدولي للكتاب21687161
معرّف المصادر الموحدhttp://dx.doi.org/10.1109/TCC.2021.3097770
معرّف المصادر الموحدhttp://hdl.handle.net/10576/52814
الملخصThe satisfaction of a software requirement is commonly stated as a Boolean value, that is, a security requirement is either satisfied (true) or not (false). However, a discrete Boolean value to measure the satisfaction level of a security requirement by deployed mechanisms is not very useful. Rather, it would be more effective if we could quantify the level of satisfaction of security requirements on a continuous scale. We propose an approach to achieve this for cloud software systems based on relationships between defense strength, exploitability of vulnerabilities, and attack severity. We extend the concept of entailment relationship from the field of requirements engineering with the satisfiability aspects of security requirements. The proposed approach enables us to systematically structure security concepts into three sets of related descriptions to quantify the satisfaction level of security requirements with the deployed security solutions. To demonstrate the feasibility of the proposed approach, we evaluate the approach in a case study. As a result, security administrators are able to deploy more effective and appropriate security solutions based on their assessment.
راعي المشروعThis article was made possible by Grant NPRP 8-531-1-111 from Qatar National Research Fund (QNRF)
اللغةen
الناشرInstitute of Electrical and Electronics Engineers Inc.
الموضوعCloud computing
entailment relationship
security quantification
security requirements
العنوانQuantifying Satisfaction of Security Requirements of Cloud Software Systems
النوعArticle
الصفحات426-444
رقم العدد1
رقم المجلد11
dc.accessType Abstract Only


الملفات في هذه التسجيلة

الملفاتالحجمالصيغةالعرض

لا توجد ملفات لها صلة بهذه التسجيلة.

هذه التسجيلة تظهر في المجموعات التالية

عرض بسيط للتسجيلة