Graphical Modeling of Security Goals and Software Vulnerabilities

View Sample PDF

Author(s): David Byers (Linköping University, Sweden)and Nahid Shahmehri (Linköping University, Sweden)
Copyright: 2015
Pages: 31
Source title: Handbook of Research on Innovations in Systems and Software Engineering
Source Author(s)/Editor(s): Vicente García Díaz (University of Oviedo, Spain), Juan Manuel Cueva Lovelle (University of Oviedo, Spain)and B. Cristina Pelayo García-Bustelo (University of Oviedo, Spain)
DOI: 10.4018/978-1-4666-6359-6.ch001

Keywords: Computer Science & IT / Information Science Reference / Systems & Software Design / Systems and Software Engineering

Purchase

View Graphical Modeling of Security Goals and Software Vulnerabilities on the publisher's website for pricing and purchasing information.

Abstract

Security has become recognized as a critical aspect of software development, leading to the development of various security-enhancing techniques, many of which use some kind of custom modeling language. Models in different languages cannot readily be related to each other, which is an obstacle to using several techniques together. The sheer number of languages is, in itself, also an obstacle to adoption by developers. The authors have developed a modeling language that can be used in place of four existing modeling languages: attack trees, vulnerability cause graphs, security activity graphs, and security goal indicator trees. Models in the new language can be transformed to and from the earlier language, and a precise definition of model semantics enables an even wider range of applications, such as testing and static analysis. This chapter explores this new language.

The IRMA Community

Research IRM

Graphical Modeling of Security Goals and Software Vulnerabilities

Purchase

Abstract

Related Content

IRMA Sponsors