MASG: Advanced Misuse Case Analysis Model with Assets and Security Goals

• Item type: Journal(1)
• 公開日: 2014-05-15
• タイトル: MASG: Advanced Misuse Case Analysis Model with Assets and Security Goals
• タイトル / 言語: en
• タイトル: MASG: Advanced Misuse Case Analysis Model with Assets and Security Goals
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: [一般論文] security, requirements analysis, misuse case and goal oriented requirements analysis
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_6501
• 資源タイプ: journal article
• 著者所属: Institute of Information Security
• 著者所属: National Institute of Advanced Industrial Science and Technology
• 著者所属: Kanagawa University
• 著者所属: National Institute of Informatics
• 著者所属(英): en
• 著者所属(英): Institute of Information Security
• 著者所属(英): en
• 著者所属(英): National Institute of Advanced Industrial Science and Technology
• 著者所属(英): en
• 著者所属(英): Kanagawa University
• 著者所属(英): en
• 著者所属(英): National Institute of Informatics
• 著者名: Takao, Okubo; Kenji, Taguchi; Haruhiko, Kaiya; Nobukazu, Yoshioka
• 著者名(英): Takao, Okubo; Kenji, Taguchi; Haruhiko, Kaiya; Nobukazu, Yoshioka
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: Misuse case model and its development process are useful and practical for security requirements analysis, but they require expertise especially about security assets and goals. To enable inexperienced requirements analysts to elicit and to analyse security requirements, we present an extension of misuse case model and its development process by incorporating new model elements, assets and security goals. We show its effectiveness from the quantitative and qualitative results of a case study. According to the results, we conclude the extension and its process enable inexperienced analysts to elicit security requirements as well as experienced analysts do.; ------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.22(2014) No.3 (online); DOI http://dx.doi.org/10.2197/ipsjjip.22.536; ------------------------------
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: Misuse case model and its development process are useful and practical for security requirements analysis, but they require expertise especially about security assets and goals. To enable inexperienced requirements analysts to elicit and to analyse security requirements, we present an extension of misuse case model and its development process by incorporating new model elements, assets and security goals. We show its effectiveness from the quantitative and qualitative results of a case study. According to the results, we conclude the extension and its process enable inexperienced analysts to elicit security requirements as well as experienced analysts do.; ------------------------------; This is a preprint of an article intended for publication Journal of; Information Processing(JIP). This preprint should not be cited. This; article should be cited as: Journal of Information Processing Vol.22(2014) No.3 (online); DOI http://dx.doi.org/10.2197/ipsjjip.22.536; ------------------------------
• 書誌レコードID / 収録物識別子タイプ: NCID
• 書誌レコードID / 収録物識別子: AN00116647
• 書誌情報: 情報処理学会論文誌; 巻 55, 号 5, 発行日 2014-05-15
• ISSN / 収録物識別子タイプ: ISSN
• ISSN / 収録物識別子: 1882-7764