Security Requirements Engineering by Fabiano Dalpiaz

Security Requirements Engineering by Fabiano Dalpiaz

A novel, model-driven approach to security requirements engineering that focuses on socio-technical systems rather than merely technical systems.

Security requirements engineering is especially challenging because designers must consider not just the software under design but also interactions among people, organizations, hardware, and software. Taking this broader perspective means designing a secure socio-technical system rather than a merely technical system. This book presents a novel, model-driven approach to designing secure socio-technical systems. It introduces the Socio-Technical Modeling Language (STS-ML) and presents a freely available software tool, STS-Tool, that supports this design approach through graphical modeling, automated reasoning capabilities to verify the models constructed, and the automatic derivation of security requirements documents.

After an introduction to security requirements engineering and an overview of computer and information security, the book presents the STS-ML modeling language, introducing the modeling concepts used, explaining how to use STS-ML within the STS method for security requirements, and providing guidelines for the creation of models. The book then puts the STS approach into practice, introducing the STS-Tool and presenting two case studies from industry: an online collaborative platform and an e-Government system. Finally, the book considers other methods that can be used in conjunction with the STS method or that constitute an alternative to it. The book is suitable for course use or as a reference for practitioners. Exercises, review questions, and problems appear at the end of each chapter.

Fabiano Dalpiaz is Assistant Professor in the Department of Information and Computing Sciences at Utrecht University, the Netherlands.

Elda Paja is a Postdoctoral Research Fellow in the Department of Engineering and Computer Science at the University of Trento, Italy.

Paolo Giorgini is Associate Professor in the Department of Engineering and Computer Science at the University of Trento.

SKU	Unavailable
ISBN 13	9780262034210
ISBN 10	0262034212
Title	Security Requirements Engineering
Author	Fabiano Dalpiaz
Series	Information Systems
Condition	Unavailable
Binding Type	Hardback
Publisher	MIT Press Ltd
Year published	2016-01-22
Number of pages	224
Cover note	Book picture is for illustrative purposes only, actual binding, cover or edition may vary.