Visualising personas as goal models to find security tensions

Shamal Faily; Claudia Iacob; Raian Ali; Duncan Ki-Aries

doi:10.1108/ICS-03-2021-0035

Visualising personas as goal models to find security tensions

Shamal Faily^*, Claudia Iacob, Raian Ali, Duncan Ki-Aries

^*Corresponding author for this work

School of Computing

Research output: Contribution to journal › Article › peer-review

35 Downloads (Pure)

Abstract

Purpose: This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions.

Design/methodology/approach: The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards.

Findings: Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain.

Originality/value: The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.

Original language	English
Pages (from-to)	787-815
Number of pages	29
Journal	Information and Computer Security
Volume	29
Issue number	5
DOIs	https://doi.org/10.1108/ICS-03-2021-0035
Publication status	Published - 12 Nov 2021

Keywords

goal models
I*
personas

Access to Document

10.1108/ICS-03-2021-0035

10-1108_ICS-03-2021-0035Final published version, 2.48 MBLicence: CC BY

Visualising Personas as Goal Models to Find Security Tensions: example models
Faily, S. (Creator), Iacob, C. (Creator), Ali, R. (Creator) & Ki-Aries, D. (Creator), Zenodo, 2021
DOI: 10.5281/zenodo.4584620, https://zenodo.org/record/4584620
Dataset

Cite this

@article{ab2c7c229f874d59bb7ab82f1713d6fe,

title = "Visualising personas as goal models to find security tensions",

abstract = "Purpose: This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions. Design/methodology/approach: The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards. Findings: Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain. Originality/value: The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.",

keywords = "goal models, I*, personas",

author = "Shamal Faily and Claudia Iacob and Raian Ali and Duncan Ki-Aries",

note = "Publisher Copyright: {\textcopyright} 2021, Shamal Faily, Claudia Iacob, Raian Ali and Duncan Ki-Aries.",

year = "2021",

month = nov,

day = "12",

doi = "10.1108/ICS-03-2021-0035",

language = "English",

volume = "29",

pages = "787--815",

journal = "Information and Computer Security",

issn = "2056-4961",

publisher = "Emerald Publishing Limited",

number = "5",

}

TY - JOUR

T1 - Visualising personas as goal models to find security tensions

AU - Faily, Shamal

AU - Iacob, Claudia

AU - Ali, Raian

AU - Ki-Aries, Duncan

PY - 2021/11/12

Y1 - 2021/11/12

N2 - Purpose: This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions. Design/methodology/approach: The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards. Findings: Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain. Originality/value: The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.

AB - Purpose: This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions. Design/methodology/approach: The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards. Findings: Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain. Originality/value: The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.

KW - goal models

KW - I

KW - personas

UR - http://www.scopus.com/inward/record.url?scp=85112713908&partnerID=8YFLogxK

U2 - 10.1108/ICS-03-2021-0035

DO - 10.1108/ICS-03-2021-0035

M3 - Article

AN - SCOPUS:85112713908

SN - 2056-4961

VL - 29

SP - 787

EP - 815

JO - Information and Computer Security

JF - Information and Computer Security

IS - 5

ER -

Visualising personas as goal models to find security tensions

Abstract

Keywords

Access to Document

Fingerprint

Datasets

Visualising Personas as Goal Models to Find Security Tensions: example models

Cite this