An Asset to Security Modeling?

Author(s):  
Andreas Poller ◽  
Sven Türpe ◽  
Katharina Kinder-Kurlanda
Keyword(s):  
Author(s):  
Ayda Saidane ◽  
Nicolas Guelfi

The quality of software systems depends strongly on their architecture. For this reason, taking into account non-functional requirements at architecture level is crucial for the success of the software development process. Early architecture model validation facilitates the detection and correction of design errors. In this research, the authors are interested in security critical systems, which require a reliable validation process. So far, they are missing security-testing approaches providing an appropriate compromise between software quality and development cost while satisfying certification and audit procedures requirements through automated and documented validation activities. In this chapter, the authors propose a novel test-driven and architecture model-based security engineering approach for resilient systems. It consists of a test-driven security modeling framework and a test based validation approach. The assessment of the security requirement satisfaction is based on the test traces analysis. Throughout this study, the authors illustrate the approach using a client server architecture case study.


2014 ◽  
pp. 2072-2098
Author(s):  
Ayda Saidane ◽  
Nicolas Guelfi

The quality of software systems depends strongly on their architecture. For this reason, taking into account non-functional requirements at architecture level is crucial for the success of the software development process. Early architecture model validation facilitates the detection and correction of design errors. In this research, the authors are interested in security critical systems, which require a reliable validation process. So far, they are missing security-testing approaches providing an appropriate compromise between software quality and development cost while satisfying certification and audit procedures requirements through automated and documented validation activities. In this chapter, the authors propose a novel test-driven and architecture model-based security engineering approach for resilient systems. It consists of a test-driven security modeling framework and a test based validation approach. The assessment of the security requirement satisfaction is based on the test traces analysis. Throughout this study, the authors illustrate the approach using a client server architecture case study.


Author(s):  
Matt Campo ◽  
Michael Greenberg ◽  
Henry Mayer ◽  
Karen Lowrie

The National Transportation Security Center of Excellence (NTSCOE) was established in August 2007 to develop new approaches to defend, protect, and increase the resilience of the nation's multi-modal transportation infrastructure, and to create education and training programs for transportation security. The Center for Transportation Safety, Security, and Risk (CTSSR) at Rutgers University, an NTSCOE institution, developed models that address multi-modal resilience of freight and transit transportation networks. Data collection processes for each project presented significant hurdles for the research team in developing credible and accurate modeling tools. For any given data need, the potential exists for data gaps, collection, and processing errors, publication and use restrictions, and the need to obtain the most timely information. These challenges must be foreseen by researchers and practitioners in order to better accommodate potential restrictions on both data collection and dissemination while still providing users with a tool that improves decision making.


2020 ◽  
Vol 12 (11) ◽  
pp. 198
Author(s):  
Jingjing Hao ◽  
Guangsheng Han

As the intelligent car-networking represents the new direction of the future vehicular development, automotive security plays an increasingly important role in the whole car industry chain. On condition that the accompanying problems of security are proofed, vehicles will provide more convenience while ensuring safety. Security models can be utilized as tools to rationalize the security of the automotive system and represent it in a structured manner. It is essential to improve the knowledge about security models by comparing them besides proposing new methods. This paper aims to give a comprehensive introduction to the topic of security models for the Intelligent Transport System (ITS). A survey of the current methodologies for security modeling is conducted and a classification scheme is subsequently proposed. Furthermore, the existing framework and methods to build automotive security models are broadly examined according to the features of automotive electronic system. A number of fundamental aspects are defined to compare the presented methods in order to comprehend the automotive security modeling in depth.


Sign in / Sign up

Export Citation Format

Share Document