Strategic modeling for security and design

随着信息和电信服务越来越多地通过互联网提供，安全性现在必须从服务概念和设计的一开始就考虑。人们普遍认识到，仅靠技术手段无法实现安全。需求工程是软件工程的一个领域，处理系统与其周围环境之间的关系，可以用来指导软件支持服务的设计，并处理出现的复杂安全挑战。我们的目标是开发建模技术，以促进明确纳入安全考虑的设计过程中-从最初的服务概念的技术架构设计。 该方法将建立在软件需求工程中开发的建模和分析技术的基础上，包括战略社会参与者建模，场景，威胁，影响和风险分析以及其他技术。由此产生的模型还旨在促进业务设计人员，安全工程师和系统开发人员在整个服务和系统生命周期中的沟通和交互，并支持跨学科的理解和明智的设计决策和权衡。

As information and telecom services are increasingly being offered over the internet, security must now be considered from the outset of service conception and design. It is widely recognized that security cannot be achieved by technological means alone. Techniques from Requirements Engineering, an area of software engineering that deals with the relationship between a system and its surrounding environment, can be used to guide the design of software-enabled services, and to deal with the complex security challenges that arise. We aim to develop modeling techniques to facilitate the explicit incorporation of security considerations in the design process - from initial service conception to technical architecture design.  The approach will build on modeling and analysis techniques developed in software requirements engineering, including strategic social actors modeling, scenarios, analysis of threats, impacts and risk, and other techniques. The resulting models also aim to facilitate communication and interaction among business designers, security engineers, and system developers throughout the service and system lifecycle, and to support cross-disciplinary understanding and informed design decision making and tradeoffs.