Modelling security properties in a grid-based operating system with anti-goals

A. Arenas; Benjamin Aziz; J. Bicarregui; B. Matthews; E. Yang

doi:10.1109/ARES.2008.159

Modelling security properties in a grid-based operating system with anti-goals

A. Arenas, Benjamin Aziz, J. Bicarregui, B. Matthews, E. Yang

School of Computing

Research output: Contribution to conference › Paper › peer-review

126 Downloads (Pure)

Abstract

In this paper, we discuss the use of formal requirements-engineering techniques in capturing security requirements for a Grid-based operating system. We use KAOS goal model to represent two security goals for Grid systems, namely authorisation and single-sign on authentication. We apply goal-refinement to derive security requirements for these two security goals and we develop a model of antigoals and show how system vulnerabilities and threats to the security goals can arise from such anti-models.

Original language	English
Pages	1429-1436
Number of pages	8
DOIs	https://doi.org/10.1109/ARES.2008.159
Publication status	Published - Mar 2008
Event	Symposium on Requirements Engineering for Information Security - Barcelona, Spain Duration: 1 Mar 2008 → …

Conference

Conference	Symposium on Requirements Engineering for Information Security
Abbreviated title	SRIES 2008
Country/Territory	Spain
City	Barcelona
Period	1/03/08 → …

Access to Document

10.1109/ARES.2008.159

Modelling_Security_Properties_in_a_Grid-based_Operating_System_with_Anti-Goals.pdf

Cite this

@conference{041b3593f9dc47a297c0344880af4628,

title = "Modelling security properties in a grid-based operating system with anti-goals",

abstract = "In this paper, we discuss the use of formal requirements-engineering techniques in capturing security requirements for a Grid-based operating system. We use KAOS goal model to represent two security goals for Grid systems, namely authorisation and single-sign on authentication. We apply goal-refinement to derive security requirements for these two security goals and we develop a model of antigoals and show how system vulnerabilities and threats to the security goals can arise from such anti-models.",

author = "A. Arenas and Benjamin Aziz and J. Bicarregui and B. Matthews and E. Yang",

note = "Publisher: IEEE Computer Society.; Symposium on Requirements Engineering for Information Security, SRIES 2008 ; Conference date: 01-03-2008",

year = "2008",

month = mar,

doi = "10.1109/ARES.2008.159",

language = "English",

pages = "1429--1436",

}

TY - CONF

T1 - Modelling security properties in a grid-based operating system with anti-goals

AU - Arenas, A.

AU - Aziz, Benjamin

AU - Bicarregui, J.

AU - Matthews, B.

AU - Yang, E.

N1 - Publisher: IEEE Computer Society.

PY - 2008/3

Y1 - 2008/3

N2 - In this paper, we discuss the use of formal requirements-engineering techniques in capturing security requirements for a Grid-based operating system. We use KAOS goal model to represent two security goals for Grid systems, namely authorisation and single-sign on authentication. We apply goal-refinement to derive security requirements for these two security goals and we develop a model of antigoals and show how system vulnerabilities and threats to the security goals can arise from such anti-models.

AB - In this paper, we discuss the use of formal requirements-engineering techniques in capturing security requirements for a Grid-based operating system. We use KAOS goal model to represent two security goals for Grid systems, namely authorisation and single-sign on authentication. We apply goal-refinement to derive security requirements for these two security goals and we develop a model of antigoals and show how system vulnerabilities and threats to the security goals can arise from such anti-models.

U2 - 10.1109/ARES.2008.159

DO - 10.1109/ARES.2008.159

M3 - Paper

SP - 1429

EP - 1436

T2 - Symposium on Requirements Engineering for Information Security

Y2 - 1 March 2008

ER -

Modelling security properties in a grid-based operating system with anti-goals

Abstract

Conference

Access to Document

Fingerprint

Cite this