Show simple item record

AuthorNhlabatsi, Armstrong
AuthorKhan, Khaled MD
AuthorHong, Jin B.
AuthorKim, Dong Seong
AuthorFernandez, Rachael
AuthorFetais, Noora
Available date2024-03-10T05:42:08Z
Publication Date2023
Publication NameIEEE Transactions on Cloud Computing
ResourceScopus
ISSN21687161
URIhttp://dx.doi.org/10.1109/TCC.2021.3097770
URIhttp://hdl.handle.net/10576/52814
AbstractThe satisfaction of a software requirement is commonly stated as a Boolean value, that is, a security requirement is either satisfied (true) or not (false). However, a discrete Boolean value to measure the satisfaction level of a security requirement by deployed mechanisms is not very useful. Rather, it would be more effective if we could quantify the level of satisfaction of security requirements on a continuous scale. We propose an approach to achieve this for cloud software systems based on relationships between defense strength, exploitability of vulnerabilities, and attack severity. We extend the concept of entailment relationship from the field of requirements engineering with the satisfiability aspects of security requirements. The proposed approach enables us to systematically structure security concepts into three sets of related descriptions to quantify the satisfaction level of security requirements with the deployed security solutions. To demonstrate the feasibility of the proposed approach, we evaluate the approach in a case study. As a result, security administrators are able to deploy more effective and appropriate security solutions based on their assessment.
SponsorThis article was made possible by Grant NPRP 8-531-1-111 from Qatar National Research Fund (QNRF)
Languageen
PublisherInstitute of Electrical and Electronics Engineers Inc.
SubjectCloud computing
entailment relationship
security quantification
security requirements
TitleQuantifying Satisfaction of Security Requirements of Cloud Software Systems
TypeArticle
Pagination426-444
Issue Number1
Volume Number11
dc.accessType Abstract Only


Files in this item

FilesSizeFormatView

There are no files associated with this item.

This item appears in the following Collection(s)

Show simple item record