Loading...
Please wait, while we are loading the content...
Similar Documents
The Socio-Technical Security Requirements Modelling Language for Secure Composite Services
| Content Provider | CiteSeerX |
|---|---|
| Author | Paja, Elda Dalpiaz, Fabiano Giorgini, Paolo |
| Abstract | Abstract. Composite services foster reuse and efficiency in providing consumers with different functionalities (services). However, security aspects are a major concern, considering that both service consumers and providers are autonomous and heterogeneous—thus, loosely controllable entities. When consumers provide information in order to be furnished some service, what happens to that informa-tion? Do service consumers trust service providers? In order to tackle the design of secure and trustworthy composite services, we should consider the security requirements such a composition must satisfy. We propose STS-ml, a security re-quirements modelling language that allows modelling security requirements over participants ’ (consumers and providers) interactions. These security requirements are expressed in terms of social contracts the various parties shall comply with while interacting (consuming/furnishing some service). Most importantly, STS-ml considers social and organisational threats that might affect the said com-posite services. In this chapter, we give an overview of STS-ml, introducing its modelling and reasoning capabilities while building models from the Aniketos eGovernment case study and verifying that the composite service complies with the specification, as well as checking whether a recomposition is needed. 1 |
| File Format | |
| Access Restriction | Open |
| Subject Keyword | Security Requirement Secure Composite Service Socio-technical Security Requirement Modelling Language Service Consumer Service Provider Security Aspect Various Party Composite Service Complies Organisational Threat Different Functionality Major Concern Sts-ml Considers Aniketos Egovernment Case Study Com-posite Service Social Contract Security Re-quirements Controllable Entity Trustworthy Composite Service Composite Service Foster Reuse |
| Content Type | Text |
| Resource Type | Article |
