Graphical Modeling of Security Arguments: Current State and Future Directions

Dan  Ionita; Margaret Ford; Alexandr Vasenev; Roelf Johannes Wieringa

doi:10.1007/978-3-319-74860-3_1

Graphical Modeling of Security Arguments: Current State and Future Directions

Dan Ionita, Margaret Ford, Alexandr Vasenev, Roelf Johannes Wieringa

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

7 Downloads (Pure)

Abstract

Identifying threats and risks to complex systems often requires some form of brainstorming. In addition, eliciting security requirements involves making traceable decisions about which risks to mitigate and how. The complexity and dynamics of modern socio-technical systems mean that their security cannot be formally proven. Instead, some researchers have turned to modeling the claims underpinning a risk assessment and the arguments which support security decisions. As a result, several argumentation-based risk analysis and security requirements elicitation frameworks have been proposed. These draw upon existing research in decision making and requirements engineering. Some provide tools to graphically model the underlying argumentation structures, with varying degrees of granularity and formalism. In this paper, we compare these approaches, discuss their applicability and suggest avenues …

Original language	English
Title of host publication	Graphical Models for Security
Subtitle of host publication	4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers
Editors	Peng Liu, Sjouke Mauw, Ketil Stolen
Publisher	Springer
Pages	1 - 16
Number of pages	16
ISBN (Electronic)	978-3-319-74860-3
ISBN (Print)	978-3-319-74859-7
DOIs	https://doi.org/10.1007/978-3-319-74860-3_1
Publication status	Published - 2018
Event	4th International Workshop on Graphical Models for Security, GraMSec 2017 - University Center Corwin Pavilion, Santa Barbara, United States Duration: 21 Aug 2017 → 21 Aug 2017 Conference number: 4 https://www.gramsec.uni.lu/2017/

Publication series

Name	Lecture Notes in Computer Science
Volume	10744

Workshop

Workshop	4th International Workshop on Graphical Models for Security, GraMSec 2017
Abbreviated title	GraMSec
Country/Territory	United States
City	Santa Barbara
Period	21/08/17 → 21/08/17
Internet address	https://www.gramsec.uni.lu/2017/

Keywords

graphical modeling
security arguments

Access to Document

10.1007/978-3-319-74860-3_1

Cite this

Ionita, D., Ford, M., Vasenev, A., & Wieringa, R. J. (2018). Graphical Modeling of Security Arguments: Current State and Future Directions. In P. Liu, S. Mauw, & K. Stolen (Eds.), Graphical Models for Security: 4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers (pp. 1 - 16). (Lecture Notes in Computer Science; Vol. 10744). Springer. https://doi.org/10.1007/978-3-319-74860-3_1

Ionita, Dan ; Ford, Margaret ; Vasenev, Alexandr et al. / Graphical Modeling of Security Arguments: Current State and Future Directions. Graphical Models for Security: 4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers. editor / Peng Liu ; Sjouke Mauw ; Ketil Stolen. Springer, 2018. pp. 1 - 16 (Lecture Notes in Computer Science).

@inproceedings{be8dec1ad1ff441b8471f91bed579586,

title = "Graphical Modeling of Security Arguments: Current State and Future Directions",

abstract = "Identifying threats and risks to complex systems often requires some form of brainstorming. In addition, eliciting security requirements involves making traceable decisions about which risks to mitigate and how. The complexity and dynamics of modern socio-technical systems mean that their security cannot be formally proven. Instead, some researchers have turned to modeling the claims underpinning a risk assessment and the arguments which support security decisions. As a result, several argumentation-based risk analysis and security requirements elicitation frameworks have been proposed. These draw upon existing research in decision making and requirements engineering. Some provide tools to graphically model the underlying argumentation structures, with varying degrees of granularity and formalism. In this paper, we compare these approaches, discuss their applicability and suggest avenues …",

keywords = "graphical modeling, security arguments",

author = "Dan Ionita and Margaret Ford and Alexandr Vasenev and Wieringa, {Roelf Johannes}",

year = "2018",

doi = "10.1007/978-3-319-74860-3_1",

language = "English",

isbn = "978-3-319-74859-7 ",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "1 -- 16",

editor = "Peng Liu and Sjouke Mauw and Ketil Stolen",

booktitle = "Graphical Models for Security",

address = "Germany",

note = "4th International Workshop on Graphical Models for Security, GraMSec 2017, GraMSec ; Conference date: 21-08-2017 Through 21-08-2017",

url = "https://www.gramsec.uni.lu/2017/",

}

Ionita, D, Ford, M, Vasenev, A & Wieringa, RJ 2018, Graphical Modeling of Security Arguments: Current State and Future Directions. in P Liu, S Mauw & K Stolen (eds), Graphical Models for Security: 4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers. Lecture Notes in Computer Science, vol. 10744, Springer, pp. 1 - 16, 4th International Workshop on Graphical Models for Security, GraMSec 2017, Santa Barbara, California, United States, 21/08/17. https://doi.org/10.1007/978-3-319-74860-3_1

Graphical Modeling of Security Arguments: Current State and Future Directions. / Ionita, Dan ; Ford, Margaret; Vasenev, Alexandr et al.
Graphical Models for Security: 4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers. ed. / Peng Liu; Sjouke Mauw; Ketil Stolen. Springer, 2018. p. 1 - 16 (Lecture Notes in Computer Science; Vol. 10744).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Graphical Modeling of Security Arguments: Current State and Future Directions

AU - Ionita, Dan

AU - Ford, Margaret

AU - Vasenev, Alexandr

AU - Wieringa, Roelf Johannes

N1 - Conference code: 4

PY - 2018

Y1 - 2018

N2 - Identifying threats and risks to complex systems often requires some form of brainstorming. In addition, eliciting security requirements involves making traceable decisions about which risks to mitigate and how. The complexity and dynamics of modern socio-technical systems mean that their security cannot be formally proven. Instead, some researchers have turned to modeling the claims underpinning a risk assessment and the arguments which support security decisions. As a result, several argumentation-based risk analysis and security requirements elicitation frameworks have been proposed. These draw upon existing research in decision making and requirements engineering. Some provide tools to graphically model the underlying argumentation structures, with varying degrees of granularity and formalism. In this paper, we compare these approaches, discuss their applicability and suggest avenues …

AB - Identifying threats and risks to complex systems often requires some form of brainstorming. In addition, eliciting security requirements involves making traceable decisions about which risks to mitigate and how. The complexity and dynamics of modern socio-technical systems mean that their security cannot be formally proven. Instead, some researchers have turned to modeling the claims underpinning a risk assessment and the arguments which support security decisions. As a result, several argumentation-based risk analysis and security requirements elicitation frameworks have been proposed. These draw upon existing research in decision making and requirements engineering. Some provide tools to graphically model the underlying argumentation structures, with varying degrees of granularity and formalism. In this paper, we compare these approaches, discuss their applicability and suggest avenues …

KW - graphical modeling

KW - security arguments

U2 - 10.1007/978-3-319-74860-3_1

DO - 10.1007/978-3-319-74860-3_1

M3 - Conference contribution

SN - 978-3-319-74859-7

T3 - Lecture Notes in Computer Science

SP - 1

EP - 16

BT - Graphical Models for Security

A2 - Liu, Peng

A2 - Mauw, Sjouke

A2 - Stolen, Ketil

PB - Springer

T2 - 4th International Workshop on Graphical Models for Security, GraMSec 2017

Y2 - 21 August 2017 through 21 August 2017

ER -

Ionita D, Ford M, Vasenev A, Wieringa RJ. Graphical Modeling of Security Arguments: Current State and Future Directions. In Liu P, Mauw S, Stolen K, editors, Graphical Models for Security: 4th International Workshop, GraMSec 2017, Santa Barbara, CA, USA, August 21, 2017, Revised Selected Papers. Springer. 2018. p. 1 - 16. (Lecture Notes in Computer Science). doi: 10.1007/978-3-319-74860-3_1

Graphical Modeling of Security Arguments: Current State and Future Directions

Abstract

Publication series

Workshop

Keywords

Access to Document

Fingerprint

Cite this