Shamal Faily
Software for interactive secure systems design: lessons learned developing and applying CAIRIS.
Faily, Shamal; Fl�chais, Ivan
Authors
Ivan Fl�chais
Abstract
As systems become more complex, the potential for security vulnerabilities being introduced increases. If we are to provide assurances about systems we design then we need the means of analysing, managing, and generally making sense of the data that contributes to the design. Unfortunately, despite ongoing research into tools for supporting secure software development, there are few examples of how tools can be used to help build and support design models associated with security and usability. This paper summarises some of our experiences developing and applying CAIRIS: a requirements management tool for usable and secure system design. We describe our motivation for building CAIRIS, summarise how it was built and evaluated, and present our experiences applying it to real world case studies.
Citation
FAILY, S. and FLÉCHAIS, I. 2012. Software for interactive secure systems design: lessons learned developing and applying CAIRIS. In Faily, S., Fléchais, I. and Coles-Kemp, L. (eds.) Proceedings of the Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers, 11 September 2012, Birmingham, UK. Swindon: BCS [online], article number 64. Available from: https://doi.org/10.14236/ewic/HCI2012.64
Conference Name | Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers |
---|---|
Conference Location | Birmingham, UK |
Start Date | Sep 11, 2012 |
Acceptance Date | Sep 11, 2012 |
Online Publication Date | Sep 30, 2012 |
Publication Date | Sep 30, 2012 |
Deposit Date | Dec 10, 2021 |
Publicly Available Date | Dec 10, 2021 |
Publisher | BCS, The Chartered Institute for IT |
Series Title | Electronic workshops in computing |
Series ISSN | 1477-9358 |
DOI | https://doi.org/10.14236/ewic/HCI2012.64 |
Keywords | Systems security; Security risk analysis; Software engineering; Requirements engineering; Computer-aided integration of requirements and information security (CAIRIS) |
Public URL | https://rgu-repository.worktribe.com/output/1427776 |
Related Public URLs | (Full proceedings) https://rgu-repository.worktribe.com/output/1446739 |
Files
FAILY 2012 Software for interactive secure
(153 Kb)
PDF
Publisher Licence URL
https://creativecommons.org/licenses/by/4.0/
Related Outputs
Proceedings of the Designing interactive secure systems workshop (DISS 2012).
(2012)
Conference Proceeding
You might also like
Programming language evaluation criteria for safety-critical software in the air domain.
(2022)
Conference Proceeding
Privacy goals for the data lifecycle.
(2022)
Journal Article
Automation and cyber security risks on the railways: the human factors implications.
(2022)
Presentation / Conference
Assessing system of systems information security risk with OASoSIS.
(2022)
Journal Article
Integrated design framework for facilitating systems-theoretic process analysis.
(2022)
Conference Proceeding
Downloadable Citations
About OpenAIR@RGU
Administrator e-mail: publications@rgu.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search