Modelling the interplay of security, privacy and trust in sociotechnical systems: a computer-aided design approach

Personal data have become a central asset for multiple enterprise applications and online services offered by private companies, public organisations or a combination of both. The sensitivity of such data and the continuously growing legislation that accompanies their management dictate the developm...

Full description

Saved in:
Bibliographic Details
Published in:Software and systems modeling 2020-03, Vol.19 (2), p.467-491
Main Authors: Salnitri, Mattia, Angelopoulos, Konstantinos, Pavlidis, Michalis, Diamantopoulou, Vasiliki, Mouratidis, Haralambos, Giorgini, Paolo
Format: Article
Language:English
Subjects:
CAD
Compilers
Computer aided design
Computer Science
Information Systems Applications (incl.Internet)
Interpreters
IT in Business
Legislation
Privacy
Programming Languages
Programming Techniques
Regular Paper
Requirements specifications
Security
Software
Software Engineering
Software Engineering/Programming and Operating Systems
Trustworthiness
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Personal data have become a central asset for multiple enterprise applications and online services offered by private companies, public organisations or a combination of both. The sensitivity of such data and the continuously growing legislation that accompanies their management dictate the development of methods that allow the development of more secure, trustworthy software systems with focus on privacy protection. The contribution of this paper is the definition of a novel requirements engineering method that supports both early and late requirements specification, giving emphasis on security, privacy and trust. The novelty of our work is that it provides the means for software designers and security experts to analyse the system-to-be from multiple aspects, starting from identifying high-level goals to the definition of business process composition, and elicitation of mechanisms to fortify the system from external threats. The method is supported by two CASE tools. To demonstrate the applicability and usefulness of our work, the paper shows its applications to a real-world case study.
ISSN:1619-1366
1619-1374
DOI:10.1007/s10270-019-00744-x