Managing Security Control Assumptions Using Causal Traceability
Date
2015Author
Nhlabatsi, ArmstrongYu, Yijun
Zisman,
rea
Tun, Thein
Khan, Niamul
Bandara, Arosha
Khan, Khaled M.
Nuseibeh, Bashar
...show more authors ...show less authors
Metadata
Show full item recordAbstract
Security control specifications of software systems are designed to meet their security requirements. It is difficult to know both the value of assets and the malicious intention of attackers at design time, hence assumptions about the operational environment often reveal unexpected flaws. To diagnose the causes of violations in security requirements it is necessary to check these design-time assumptions. Otherwise, the system could be vulnerable to potential attacks. Addressing such vulnerabilities requires an explicit understanding of how the security control specifications were defined from the original security requirements. However, assumptions are rarely explicitly documented and monitored during system operation. This paper proposes a systematic approach to monitoring design-time assumptions explicitly as logs, by using trace ability links from requirements to specifications. The work also helps identify which alternative specifications of security control can be used to satisfy a security requirement that has been violated based on the logs. The work is illustrated by an example of an electronic patient record system.
Collections
- Computer Science & Engineering [2284 items ]