scholarly journals Towards Tool-Support for Usable Secure Requirements Engineering with CAIRIS

2010 ◽  
Vol 1 (3) ◽  
pp. 56-70 ◽  
Author(s):  
Shamal Faily ◽  
Ivan Fléchais

Understanding how to better elicit, specify, and manage requirements for secure and usable software systems is a key challenge in security software engineering, however, there lacks tool-support for specifying and managing the voluminous amounts of data the associated analysis yields. Without these tools, the subjectivity of analysis may increase as design activities progress. This paper describes CAIRIS (Computer Aided Integration of Requirements and Information Security), a step toward tool-support for usable secure requirements engineering. CAIRIS not only manages the elements associated with task, requirements, and risk analysis, it also supports subsequent analysis using novel approaches for analysing and visualising security and usability. The authors illustrate an application of CAIRIS by describing how it was used to support requirements analysis in a critical infrastructure case study.

Author(s):  
Shamal Faily ◽  
Ivan Fléchais

Understanding how to better elicit, specify, and manage requirements for secure and usable software systems is a key challenge in security software engineering, however, there lacks tool-support for specifying and managing the voluminous amounts of data the associated analysis yields. Without these tools, the subjectivity of analysis may increase as design activities progress. This paper describes CAIRIS (Computer Aided Integration of Requirements and Information Security), a step toward tool-support for usable secure requirements engineering. CAIRIS not only manages the elements associated with task, requirements, and risk analysis, it also supports subsequent analysis using novel approaches for analysing and visualising security and usability. The authors illustrate an application of CAIRIS by describing how it was used to support requirements analysis in a critical infrastructure case study.


Author(s):  
Ajantha Dahanayake

Today, components and Component Based Development (CBD) is seen as one of the important events in the evolution of information technology. Components and CBD offer the promise of a software marketplace where components may be built, bought, or sold in a manner similar to components in other industries. In the light of the ongoing developments, in the manner and art of developing software systems, it is important to consider how the Computer Aided Systems Engineering (CASE) environment that supports building these systems can be produced on a CBD approach. In spite of the fact that CASE environments have been around since the ’70s, there are still many problems with these environments. Among the problems of CASE environments are the lack of conceptual models to help understand the technology, the poor state of user requirements specification, inflexible method, support and complicated integration facilities, which contribute to the dissatisfaction in CASE users. During the ’90s there has been a growing need to provide a more formal basis to the art of software development and maintenance through standardized process and product models. The importance of CAME (Computer Aided Method Engineering) in CASE led to the development of CASE shells, MetaCASE tools, or customizable CASE environments that were intended to overcome the inflexibility of method support. The declining cost of computing technology and its increasing functionality, specifically in graphic user interfaces, has contributed to the present re-invention of CASE environments. CASE research in the last decade has addressed issues such as method integration, multiple user support, multiple representation paradigms, method modifiability and evolution, and information retrieval and computation facilities. Considerable progress has been made by isolating particular issues and providing a comprehensive solution with certain trade-off on limited flexibility. The requirement of a fully Component Based architecture for CASE environments has been not examined properly. The combination of requirements of flexibility in terms of support for arbitrary modeling techniques, and evolution of the development environment to ever-changing functionality and applications never the less needs a flexible environment architectures. Therefore, the theory formulation and development of a prototype for designing a next generation of CASE environments is addressed in this book. A CAME environment is considered as a component of a CASE environment. A comprehensive solution is sought to the environment problem by paying attention to a conceptual model of such an environment that has been designed to avoid the confusion around integration issues, and to meet the specification of user requirements concerning a component-based architecture. A CAME environment provides a fully flexible environment for method specification and integration, and can be used for information systems design activities. A large part of this book reports how this theory leads to the designing of the architecture of such an environment. This final chapter contains a review of the theory and an assessment of the extent to which its applicability is upheld.


2011 ◽  
pp. 92-104
Author(s):  
Raghvinder S. Sangwan

In an era of global economy, an enterprise must demonstrate agility in order to stay competitive. Agility requires continuous monitoring of the ever-changing business landscape and quick adaptation to that change. Often times, this means businesses must merge to form strategic partnerships allowing them to provide new products and services. Such partnerships create the need for critical information to flow seamlessly across the newly formed enterprise and be available on demand for effective collaboration and decision making. However, the legacy business information systems that each partner brings into the newly formed enterprise typically have a very narrow focus serving the needs of a single business unit within an enterprise. As such, it becomes necessary to integrate multiple different systems before the right information can be delivered to the right person at the right time. Integrating disparate systems from a technical perspective is not hard to achieve since the Webservices standard is fairly mature and provides an open infrastructure for software systems to interoperate. One must, however, first understand the need and level of cooperation and collaboration among the different segments of an enterprise, its suppliers, and its customers in order for this integration to be effective. This chapter motivates the need for model-driven requirements engineering for enterprise integration, reviews the research to date on model-driven requirements engineering, and examines a case study on integrating health-care providers to form integrated health networks to gain insight into challenges and issues.


Author(s):  
GREG BOONE

Although the majority of professional trade press and academic attention regarding CASE (Computer Aided Software/Systems Engineering) has focused on technology, software developers have not been deluded by overinflated productivity gains attributed to those technologies. Truly profound technologies require a concomitant change in methods, practices, and techniques. Unfortunately, the majority of the software industry has had the expectation that CASE will automate their current work without rethinking work practices. Changing work practices, particularly among highly independent-minded software developers, who prize independent creativity more than team engineering, is the most difficult challenge facing the advance of the software development profession. Equally difficult is the ideological change from a productivity improvement expectation to a quality improvement expectation. This paper examines the current rate of CASE adoption and the changes necessary to accelerate its successful adoption.


Author(s):  
Raffi Kamalian ◽  
Alice M. Agogino ◽  
Hideyuki Takagi

In this paper we review the current state of automated MEMS synthesis with a focus on generative methods. We use the design of a MEMS resonator as a case study and explore the role that geometric constraints and human interaction play in a computer-aided MEMS design system based on genetic algorithms.


2004 ◽  
Vol 4 (4) ◽  
pp. 316-328 ◽  
Author(s):  
Carol J. Romanowski , ◽  
Rakesh Nagi

In variant design, the proliferation of bills of materials makes it difficult for designers to find previous designs that would aid in completing a new design task. This research presents a novel, data mining approach to forming generic bills of materials (GBOMs), entities that represent the different variants in a product family and facilitate the search for similar designs and configuration of new variants. The technical difficulties include: (i) developing families or categories for products, assemblies, and component parts; (ii) generalizing purchased parts and quantifying their similarity; (iii) performing tree union; and (iv) establishing design constraints. These challenges are met through data mining methods such as text and tree mining, a new tree union procedure, and embodying the GBOM and design constraints in constrained XML. The paper concludes with a case study, using data from a manufacturer of nurse call devices, and identifies a new research direction for data mining motivated by the domains of engineering design and information.


Sign in / Sign up

Export Citation Format

Share Document