Security Requirement Modeling Support System Using Software Security Knowledge Base
Security Requirement Modeling Support System Using Software Security Knowledge Base
复制标题
使用软件安全知识库的安全需求建模支持系统
DOI：
10.1109/compsac.2018.10235
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
and Nobukazu Yoshioka
中科院分区：
文献类型：
--
作者：
Atsuo Hazeyama;Shun'ichi Tanaka;Takafumi Tanaka;Hiroaki Hashiura;Seiji Munetoh;Takao Okubo;Haruhiko Kaiya;Hironori Washizaki;and Nobukazu Yoshioka
随着互联网上的服务数量不断增加，对安全软件开发的需求也随之增加。安全软件开发要求在整个开发生命周期中考虑安全性。安全软件开发离不开各类安全知识的运用。本研究涉及安全需求分析。现有的安全需求建模系统不提供在以集成方式参考安全知识的同时创建工件的功能。在本文中，作者为误用案例图开发了一个建模支持系统，该系统能够将知识与构成该图的元素关联起来。使用该系统的实验结果显示了该系统在知识库与工件创建环境的集成以及知识与图表元素的关联方面的有用性。
With the growing number of services on the Internet, the need for secure software development has increased. It is required for secure software development to consider security in the whole development life cycle. It is indispensable for secure software development to use various types of security knowledge. This study deals with security requirement analysis. Existing security requirements modeling systems do not provide a function to create an artifact while referring to security knowledge in an integrated manner. In this paper, the authors develop a modeling support system for a misuse case diagram that enables the association of knowledge with elements that constitute the diagram. The results of an experiment using the system show the system's usefulness in both the integration of the knowledge base with the artifact creation environment and the association of the knowledge with the elements of the diagram.