NDLI: Engineering Safety and Security Related Requirements for Software Intensive Systems

Please wait, while we are loading the content...

ICSE 2007 Sponsors and Supporters

The Architecture of the Apex Platform, salesforce.com's Platform for Building On-Demand Applications

Computer Professional Ethics in Theory and in Practice

Limits to Dependability Assurance--A Controversy Revisited

Is Code Still Moving Around? Looking Back at a Decade of Code Mobility

Retrospectives on Peopleware

Agile Contracts

Modeling for Maintainability

Overview of the Impact Project

The Impact of Research on Middleware Technology

Portraits in Practice

Software Engineering: The Legacy of Barry W. Boehm

STRADA: A Tool for Scenario-Based Feature-to-Code Trace Detection and Analysis

UCSIM: A Tool for Simulating Use Case Scenarios

Building Scalable Libraries with cJ

Mismar: A New Approach to Developer Documentation

DECIMAL and PLFaultCAT: From Product-Line Requirements to Product-Line Member Software Fault Trees

Sofya: Supporting Rapid Development of Dynamic Program Analyses for Java

TAXI--A Tool for XML-Based Testing

SHIWS: A Self-Healing Integrator for Web Services

SCL: Static Enforcement and Exploration of Developer Intent in Source Code

ACL2s: "The ACL2 Sedan"

Trio2Promela: A Model Checker for Temporal Metric Specifications

Reliability Analysis of Concurrent Systems Using LTSA

WebSob: A Tool for Robustness Testing of Web Services

ArchStudio 4: An Architecture-Based Meta-Modeling Environment

Dynamo and Self-Healing BPEL Compositions

On Sufficiency of Mutants

Testing and Analysis of Access Control Policies

A Context-Oriented Framework for Software Testing in Pervasive Environment

A Data Model to Support End User Software Engineering

Ajaxifying Classic Web Applications

A Discreet, Fault-Tolerant, and Scalable Software Architectural Style for Internet-Sized Networks

Handling Safety-Related Feature Interaction in Safety-Critical Product Lines

Adaptation Hiding Modularity for Self-Adaptive Systems

Adaptive Probabilistic Model for Ranking Code-Based Static Analysis Alerts

Stakeholder Value Driven Threat Modeling for Off the Shelf Based Systems

Mining Object Usage Models

Modular-Like Transformations and Style Checking for Crosscutting Programming Concepts

Assessing Changeability by Investigating the Propagation of Change Types

Using Software Model Checking for Software Component Certification

Understanding and Aiding Code Evolution by Inferring Change Patterns

A Quality-Driven Approach to Enable Decision-Making in Self-Adaptive Software

4th International Workshop on Mining Software Repositories (MSR 2007)

Sharig and Reusing Architectural Knowledge--Architecture, Rationale, and Design Intent

The 3rd International Workshop on Software Engineering for Secure Systems SESS07--Dependable and Secure

Modeling in Software Engineering

Modeling the Effect of Size on Defect Proneness for Open-Source Software

First Workshop on the Economics of Software and Computation

Early Aspects at ICSE 2007: Workshop on Aspect-Oriented Requirements Engineering and Architecture Design

6th International Workshop on Scenarios and State Machines: Models, Algorithms, and Tools (SCESM07)

Fifth Workshop on Software Quality

SDSOA 2007: International Workshop on Systems Development in SOA Environments

First International Workshop on Emerging Trends in FLOSS Research and Development

2nd International Workshop on Realising Evidence-Based Software Engineering (REBSE-2)

Fifth International Workshop on Dynamic Analysis (WODA 2007)

Workshop on Software Technologies for Ultra-Large Scale Systems

Summery of the 2^nd International Workshop on Incorporating COTS Software into Software Systems (IWICSS): Tools and Techniques

1st Workshop on Assessment of Contemporary Modularization Techniques (ACoM.07)

4th International ICSE Workshop on Software Engineering for Automotive Systems

Third International Workshop on Software Engineering for High Performance Computing (HPC) Applications

Workshop Summary--ICSE Workshop on Software Engineering for Pervasive Computing Applications, Systems, and Environments (SEPCASE)

Automation of Software Test--Report on the Second Interional Workshop AST 2007

SEAMS 2007: Software Engineering for Adaptive and Self-Managing Systems

Evaluating Dependability Attributes of Component-Based Specifications

Requirements Engineering so Things Don't Get Ugly

Testing Concurrent Java Components

Empirical Methods in Software Engineering Research

Lean Software Development

Get Your Experience Factory Ready for the Next Decade--Ten Years after "How to Build and Run One"--

Engineering Safety and Security Related Requirements for Software Intensive Systems

Architecture Knowledge Management: Challenges, Approaches, and Tools

Mining Software Engineering Data

Migration of Legacy Assets to Service-Oriented Architecture Environments

Agile Methods: Crossing the Chasm

Cost-Benefit Analysis of Software Development Techniques and Practices

Languages for Safety-Critical Software: Issues and Assessment

Developing Secure Embedded Systems: Pitfalls and How to Avoid Them

Aspect-Oriented Design in Java/AspectJ and Ruby

Variability Management in Software Product Line Engineering

Engineering Medical Information Systems: Architecture, Data and Usability & Security

Engineering Safety and Security Related Requirements for Software Intensive Systems

Content Provider	ACM Digital Library
Author	Firesmith, Donald G.
Abstract	Many software-intensive systems have significant safety and security ramifications and need to have their associated safety- and security-related requirements properly engineered. It has been observed by several consultants, researchers, and authors that inadequate requirements are a major cause of accidents involving software-intensives systems, and poor security requirements prevent the early incorporation of security concerns into the architecture. Yet in practice, there is very little interaction between the requirements, safety, and security disciplines and little collaboration between their respective communities. Most requirements engineers, safety engineers, and security engineers know little about their respective disciplines. Also, safety and security engineering typically concentrates on architectures and designs rather than requirements because hazard and threat analysis typically depends on the identification of hardware and software components, the failure of which can cause accidents and vulnerabilities which can enable successful attacks. This leads to safety- and security-related requirements that are often ambiguous, incomplete, unverifiable, and even missing. This tutorial begins with a single common realistic example of a safety- and security-critical system that will be used throughout to provide good examples of safety- and security-related requirements. The tutorial provides a consistent ontology of safety, security, and requirements concepts and terminology, provides clear definitions and descriptions of the different kinds of safety- and security-related requirements, and finishes with a practical consistent combined process for engineering them.
File Format	PDF
ISBN	0769528929
DOI	10.1109/ICSECOMPANION.2007.35
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-05-20
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in