MASG: Advanced Misuse Case Analysis Model with Assets and Security Goals

• Okubo Takao

  Institute of Information Security

• Taguchi Kenji

  National Institute of Advanced Industrial Science and Technology

• Kaiya Haruhiko

  Kanagawa University

• Yoshioka Nobukazu

  National Institute of Informatics

抄録

Misuse case model and its development process are useful and practical for security requirements analysis, but they require expertise especially about security assets and goals. To enable inexperienced requirements analysts to elicit and to analyse security requirements, we present an extension of misuse case model and its development process by incorporating new model elements, assets and security goals. We show its effectiveness from the quantitative and qualitative results of a case study. According to the results, we conclude the extension and its process enable inexperienced analysts to elicit security requirements as well as experienced analysts do.

収録刊行物

• Journal of Information Processing

  Journal of Information Processing 22 (3), 536-546, 2014

  一般社団法人 情報処理学会

キーワード

• security
• requirements analysis
• misuse case and goal oriented requirements analysis

詳細情報

• CRID: 1390001205295571584
• NII論文ID: 130004726192
• NII書誌ID: AA00700121
• DOI: 10.2197/ipsjjip.22.536
• ISSN: 18826652
• Web Site: http://id.nii.ac.jp/1001/00102368/
• Web Site: https://www.jstage.jst.go.jp/article/ipsjjip/22/3/22_536/_pdf
• 本文言語コード: en
• データソース種別:
  • JaLC
  • IRDB
  • Crossref
  • CiNii Articles
  • KAKEN
• 抄録ライセンスフラグ: 使用不可