Towards requirement and modeling driven security evaluation

Reijo Savola

doi:10.1109/ICSNC.2006.72

Towards requirement and modeling driven security evaluation

Reijo Savola

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

3 Citations (Scopus)

Abstract

Development of the information security requirements of practical telecommunications and software-intensive systems is typically at an inadequate level and relies heavily on the experience of the security professionals. Security requirements are in the focus in all phases of security engineering. Obviously, automated approaches are needed in this field. We here introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

Original language	English
Title of host publication	International Conference on Systems and Networks Communications, ICSNC 2006
Publisher	IEEE Institute of Electrical and Electronic Engineers
ISBN (Print)	978-0-7695-2699-7
DOIs	https://doi.org/10.1109/ICSNC.2006.72
Publication status	Published - 2006
MoE publication type	A4 Article in a conference publication
Event	International Conference on Systems and Networks Communications, ICSNC 2006 - Papeete, Tahiti, French Polynesia Duration: 28 Oct 2006 → 2 Nov 2006 Conference number: 1

Conference

Conference	International Conference on Systems and Networks Communications, ICSNC 2006
Abbreviated title	ICSNC'06
Country/Territory	French Polynesia
City	Papeete, Tahiti
Period	28/10/06 → 2/11/06

Keywords

information security
network security

Access to Document

10.1109/ICSNC.2006.72

Cite this

@inproceedings{e2388f80206543c5841044a7b6e44a85,

title = "Towards requirement and modeling driven security evaluation",

abstract = "Development of the information security requirements of practical telecommunications and software-intensive systems is typically at an inadequate level and relies heavily on the experience of the security professionals. Security requirements are in the focus in all phases of security engineering. Obviously, automated approaches are needed in this field. We here introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.",

keywords = "information security, network security",

author = "Reijo Savola",

year = "2006",

doi = "10.1109/ICSNC.2006.72",

language = "English",

isbn = "978-0-7695-2699-7",

booktitle = "International Conference on Systems and Networks Communications, ICSNC 2006",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

note = "International Conference on Systems and Networks Communications, ICSNC 2006, ICSNC'06 ; Conference date: 28-10-2006 Through 02-11-2006",

}

Savola, R 2006, Towards requirement and modeling driven security evaluation. in International Conference on Systems and Networks Communications, ICSNC 2006., 4041535, IEEE Institute of Electrical and Electronic Engineers, International Conference on Systems and Networks Communications, ICSNC 2006, Papeete, Tahiti, French Polynesia, 28/10/06. https://doi.org/10.1109/ICSNC.2006.72

TY - GEN

T1 - Towards requirement and modeling driven security evaluation

AU - Savola, Reijo

N1 - Conference code: 1

PY - 2006

Y1 - 2006

N2 - Development of the information security requirements of practical telecommunications and software-intensive systems is typically at an inadequate level and relies heavily on the experience of the security professionals. Security requirements are in the focus in all phases of security engineering. Obviously, automated approaches are needed in this field. We here introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

AB - Development of the information security requirements of practical telecommunications and software-intensive systems is typically at an inadequate level and relies heavily on the experience of the security professionals. Security requirements are in the focus in all phases of security engineering. Obviously, automated approaches are needed in this field. We here introduce a framework for security evaluation based on security requirement definition, behavior modeling and evidence collection.

KW - information security

KW - network security

U2 - 10.1109/ICSNC.2006.72

DO - 10.1109/ICSNC.2006.72

M3 - Conference article in proceedings

SN - 978-0-7695-2699-7

BT - International Conference on Systems and Networks Communications, ICSNC 2006

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - International Conference on Systems and Networks Communications, ICSNC 2006

Y2 - 28 October 2006 through 2 November 2006

ER -

Towards requirement and modeling driven security evaluation

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this