Software for interactive secure systems design: lessons learned developing and applying CAIRIS.

Faily, Shamal; Fl�chais, Ivan

Abstract

As systems become more complex, the potential for security vulnerabilities being introduced increases. If we are to provide assurances about systems we design then we need the means of analysing, managing, and generally making sense of the data that contributes to the design. Unfortunately, despite ongoing research into tools for supporting secure software development, there are few examples of how tools can be used to help build and support design models associated with security and usability. This paper summarises some of our experiences developing and applying CAIRIS: a requirements management tool for usable and secure system design. We describe our motivation for building CAIRIS, summarise how it was built and evaluated, and present our experiences applying it to real world case studies.

Citation

FAILY, S. and FLÉCHAIS, I. 2012. Software for interactive secure systems design: lessons learned developing and applying CAIRIS. In Faily, S., Fléchais, I. and Coles-Kemp, L. (eds.) Proceedings of the Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers, 11 September 2012, Birmingham, UK. Swindon: BCS [online], article number 64. Available from: https://doi.org/10.14236/ewic/HCI2012.64

• Presentation Conference Type: Conference Paper (published)
• Conference Name: Designing interactive secure systems workshop (DISS 2012), part of the 26th International BCS human computer interaction conference (HCI 2012): people and computers
• Start Date: Sep 11, 2012
• Acceptance Date: Sep 11, 2012
• Online Publication Date: Sep 30, 2012
• Publication Date: Sep 30, 2012
• Deposit Date: Dec 10, 2021
• Publicly Available Date: Dec 10, 2021
• Publisher: BCS, The Chartered Institute for IT
• Peer Reviewed: Peer Reviewed
• Series Title: Electronic workshops in computing
• Series ISSN: 1477-9358
• DOI: https://doi.org/10.14236/ewic/HCI2012.64
• Keywords: Systems security; Security risk analysis; Software engineering; Requirements engineering; Computer-aided integration of requirements and information security (CAIRIS)
• Public URL: https://rgu-repository.worktribe.com/output/1427776
• Related Public URLs: (Full proceedings) https://rgu-repository.worktribe.com/output/1446739