By Topic

An Aspect-Oriented Approach to Security Requirements Analysis

Sign In

Cookies must be enabled to login.After enabling cookies , please use refresh or reload or ctrl+f5 on the browser for the login options.

The purchase and pricing options are temporarily unavailable. Please try again later.
3 Author(s)
Dianxiang Xu ; Dept. of Comput. Sci., North Dakota State Univ., Fargo, ND ; Goel, V. ; Nygard, K.

This paper presents an aspect-oriented approach to integrated elicitation of functional and security requirements based on use case-driven development. We identify security threats with respect to use cases and adopt threat mitigations for preventing or reducing security threats. To capture crosscutting nature of threats and mitigations, we specify them as aspects that encapsulate pointcuts and advice. A threat (mitigation) pointcut is a collection of join points in use cases at which the use cases are threatened (secured); whereas threat/mitigation advice describes how a threat can become an attack (can be mitigated). Eliciting threats and mitigations as aspects provides a structured way for separating functional and security concerns

Published in:

Computer Software and Applications Conference, 2006. COMPSAC '06. 30th Annual International  (Volume:2 )

Date of Conference:

17-21 Sept. 2006