The Open UniversitySkip to content
 

The Effect of trust assumptions on the elaboration of security requirements

Haley, Charles B.; Laney, Robin C.; Moffett, Jonathan D. and Nuseibeh, Bashar (2004). The Effect of trust assumptions on the elaboration of security requirements. In: 12th IEEE International Requirements Engineering Conference (RE'04), 6-10 Sep 2004, Kyoto, Japan.

DOI (Digital Object Identifier) Link: http://dx.doi.org/10.1109/ICRE.2004.1335668
Google Scholar: Look up in Google Scholar

Abstract

Assumptions are frequently made during requirements analysis of a system-to-be about the trustworthiness of its various components (including human components). These trust assumptions can affect the scope of the analysis, derivation of security requirements, and in some cases how functionality is realized. This paper presents trust assumptions in the context of analysis of security requirements. A running example shows how trust assumptions can be used by a requirements engineer to help define and limit the scope of analysis and to document the decisions made during the process. The paper concludes with a case study examining the impact of trust assumptions on software that uses the Secure Electronic Transaction (SET) specification.

Item Type: Conference Item
Extra Information: RE 04 received 99 full research papers and accepted 27. It is the main international conference in the field of requirements engineering.


Keywords: security requirements; trust assumptions; problem frames
Academic Unit/Department: Mathematics, Computing and Technology > Computing & Communications
Interdisciplinary Research Centre: Centre for Research in Computing (CRC)
Item ID: 3276
Depositing User: Robin Laney
Date Deposited: 03 Jul 2006
Last Modified: 02 Dec 2010 19:49
URI: http://oro.open.ac.uk/id/eprint/3276
Share this page:

Altmetrics

Scopus Citations

Actions (login may be required)

View Item
Report issue / request change

Policies | Disclaimer

© The Open University   + 44 (0)870 333 4340   general-enquiries@open.ac.uk