Skip to main content

Research Repository

Advanced Search

Software for interactive secure systems design: lessons learned developing and applying CAIRIS.

Faily, Shamal; Fl�chais, Ivan

Authors

Shamal Faily

Ivan Fl�chais



Abstract

As systems become more complex, the potential for security vulnerabilities being introduced increases. If we are to provide assurances about systems we design then we need the means of analysing, managing, and generally making sense of the data that contributes to the design. Unfortunately, despite ongoing research into tools for supporting secure software development, there are few examples of how tools can be used to help build and support design models associated with security and usability. This paper summarises some of our experiences developing and applying CAIRIS: a requirements management tool for usable and secure system design. We describe our motivation for building CAIRIS, summarise how it was built and evaluated, and present our experiences applying it to real world case studies.

Citation

FAILY, S. and FLÉCHAIS, I. 2012. Software for interactive secure systems design: lessons learned developing and applying CAIRIS. In Faily, S., Fléchais, I. and Coles-Kemp, L. (eds.) Proceedings of the Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers, 11 September 2012, Birmingham, UK. Swindon: BCS [online], article number 64. Available from: https://doi.org/10.14236/ewic/HCI2012.64

Conference Name Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers
Conference Location Birmingham, UK
Start Date Sep 11, 2012
Acceptance Date Sep 11, 2012
Online Publication Date Sep 30, 2012
Publication Date Sep 30, 2012
Deposit Date Dec 10, 2021
Publicly Available Date Mar 29, 2024
Publisher BCS, The Chartered Institute for IT
Series Title Electronic workshops in computing
Series ISSN 1477-9358
DOI https://doi.org/10.14236/ewic/HCI2012.64
Keywords Systems security; Security risk analysis; Software engineering; Requirements engineering; Computer-aided integration of requirements and information security (CAIRIS)
Public URL https://rgu-repository.worktribe.com/output/1427776
Related Public URLs (Full proceedings) https://rgu-repository.worktribe.com/output/1446739

Files




Related Outputs



You might also like



Downloadable Citations