Duncan Ki-Aries
Assessing system of systems security risk and requirements with OASoSIS.
Ki-Aries, Duncan; Faily, Shamal; Dogan, Huseyin; Williams, Christopher
Authors
Shamal Faily
Huseyin Dogan
Christopher Williams
Contributors
Kristian Beckers
Editor
Shamal Faily
Editor
Seok-Won Lee
Editor
Nancy Mead
Editor
Abstract
When independent systems come together as a System of Systems (SoS) to achieve a new purpose, dealing with requirements conflicts across systems becomes a challenge. Moreover, assessing and modelling security risk for independent systems and the SoS as a whole is challenged by a gap in related research and approaches within the SoSs domain. In this paper, we present an approach for bridging SoS and Requirements Engineering by identifying aligning SoSs concepts to assess and model security risk and requirements. We introduce our OASoSIS approach modifying OCTAVE Allegro for SoSs using CAIRIS (Computer Aided Integration of Requirements and Information Security) with a medical evacuation (MEDEVAC) SoS exemplar for Security Requirements Engineering tool-support.
Citation
KI-ARIES, D., FAILY, S., DOGAN, H. and WILLIAMS, C. 2018. Assessing system of systems security risk and requirements with OASoSIS. In Beckers, K., Faily, S., Lee, S.-W. and Mead, N. (eds.) Proceedings of the 5th International workshop on evolving security and privacy requirements engineering (ESPRE 2018), 20 August 2018, Banff, Canada. Los Alamitos: IEEE Computer Society [online], pages 14-20. Available from: https://doi.org/10.1109/ESPRE.2018.00009
Conference Name | 5th International workshop on evolving security and privacy requirements engineering (ESPRE 2018) |
---|---|
Conference Location | Banff, Canada |
Start Date | Aug 20, 2018 |
Acceptance Date | Jul 6, 2018 |
Online Publication Date | Oct 22, 2018 |
Publication Date | Dec 31, 2018 |
Deposit Date | Sep 17, 2021 |
Publicly Available Date | Dec 1, 2021 |
Publisher | IEEE Computer Society |
Pages | 14-20 |
ISBN | 9781538684214 |
DOI | https://doi.org/10.1109/ESPRE.2018.00009 |
Keywords | System of systems (SoS); Security risk analysis; Human factors; Requirements engineering; Computer aided integration of requirements and information security (CAIRIS) |
Public URL | https://rgu-repository.worktribe.com/output/1437872 |
Files
KI-ARIES 2018 Assessing system of systems
(1.6 Mb)
PDF
Copyright Statement
© IEEE
You might also like
Automation and cyber security risks on the railways: the human factors implications.
(2022)
Presentation / Conference
Integrated design framework for facilitating systems-theoretic process analysis.
(2022)
Conference Proceeding
Cybersecurity user requirements analysis: the ECHO approach.
(2022)
Conference Proceeding
Use-case informed task analysis for secure and usable design solutions in rail.
(2021)
Conference Proceeding
Visualising personas as goal models to find security tensions.
(2021)
Journal Article