Requirement centric security evaluation of software intensive systems

Reijo Savola

doi:10.1109/DEPCOS-RELCOMEX.2007.41

Requirement centric security evaluation of software intensive systems

Reijo Savola

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

4 Citations (Scopus)

Abstract

Development of the information security requirements of practical software-intensive systems is typically ignored, at an inadequate level or relies heavily on the experience of the security professionals. However, it is obvious that security requirements are in the focus in all phases of security engineering. Automated approaches are needed in this field. We introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

Original language	English
Title of host publication	Proceedings of the 2nd International Conference on Dependability of Computer Systems, DepCOS-RELCOMEX 2007
Publisher	IEEE Institute of Electrical and Electronic Engineers
Pages	135-142
ISBN (Print)	0-7695-2850-3
DOIs	https://doi.org/10.1109/DEPCOS-RELCOMEX.2007.41
Publication status	Published - 2007
MoE publication type	A4 Article in a conference publication
Event	2nd International Conference on Dependability of Computer Systems, DepCoS-RELCOMEX 2007 - Szklarska, Poland Duration: 14 Jun 2007 → 16 Jun 2007

Conference

Conference	2nd International Conference on Dependability of Computer Systems, DepCoS-RELCOMEX 2007
Abbreviated title	DepCoS-RELCOMEX 2007
Country/Territory	Poland
City	Szklarska
Period	14/06/07 → 16/06/07

Keywords

information security
security
software-intensive products
software
software safety

Access to Document

10.1109/DEPCOS-RELCOMEX.2007.41

Cite this

@inproceedings{8f722caea2c64f758f3b2bbd1b3cb1ad,

title = "Requirement centric security evaluation of software intensive systems",

abstract = "Development of the information security requirements of practical software-intensive systems is typically ignored, at an inadequate level or relies heavily on the experience of the security professionals. However, it is obvious that security requirements are in the focus in all phases of security engineering. Automated approaches are needed in this field. We introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.",

keywords = "information security, security, software-intensive products, software, software safety",

author = "Reijo Savola",

year = "2007",

doi = "10.1109/DEPCOS-RELCOMEX.2007.41",

language = "English",

isbn = "0-7695-2850-3",

pages = "135--142",

booktitle = "Proceedings of the 2nd International Conference on Dependability of Computer Systems, DepCOS-RELCOMEX 2007",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

note = "2nd International Conference on Dependability of Computer Systems, DepCoS-RELCOMEX 2007, DepCoS-RELCOMEX 2007 ; Conference date: 14-06-2007 Through 16-06-2007",

}

Savola, R 2007, Requirement centric security evaluation of software intensive systems. in Proceedings of the 2nd International Conference on Dependability of Computer Systems, DepCOS-RELCOMEX 2007. IEEE Institute of Electrical and Electronic Engineers, pp. 135-142, 2nd International Conference on Dependability of Computer Systems, DepCoS-RELCOMEX 2007, Szklarska, Poland, 14/06/07. https://doi.org/10.1109/DEPCOS-RELCOMEX.2007.41

Requirement centric security evaluation of software intensive systems. / Savola, Reijo.
Proceedings of the 2nd International Conference on Dependability of Computer Systems, DepCOS-RELCOMEX 2007. IEEE Institute of Electrical and Electronic Engineers, 2007. p. 135-142.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Requirement centric security evaluation of software intensive systems

AU - Savola, Reijo

PY - 2007

Y1 - 2007

N2 - Development of the information security requirements of practical software-intensive systems is typically ignored, at an inadequate level or relies heavily on the experience of the security professionals. However, it is obvious that security requirements are in the focus in all phases of security engineering. Automated approaches are needed in this field. We introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

AB - Development of the information security requirements of practical software-intensive systems is typically ignored, at an inadequate level or relies heavily on the experience of the security professionals. However, it is obvious that security requirements are in the focus in all phases of security engineering. Automated approaches are needed in this field. We introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

KW - information security

KW - security

KW - software-intensive products

KW - software

KW - software safety

U2 - 10.1109/DEPCOS-RELCOMEX.2007.41

DO - 10.1109/DEPCOS-RELCOMEX.2007.41

M3 - Conference article in proceedings

SN - 0-7695-2850-3

SP - 135

EP - 142

BT - Proceedings of the 2nd International Conference on Dependability of Computer Systems, DepCOS-RELCOMEX 2007

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - 2nd International Conference on Dependability of Computer Systems, DepCoS-RELCOMEX 2007

Y2 - 14 June 2007 through 16 June 2007

ER -

Requirement centric security evaluation of software intensive systems

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this