Assessing system of systems security risk and requirements with oasosis

Authors: Ki-Aries, D., Faily, S., Dogan, H. and Williams, C.

Journal: Proceedings - 2018 5th International Workshop on Evolving Security and Privacy Requirements Engineering, ESPRE 2018

Pages: 14-20

ISBN: 9781538684207

DOI: 10.1109/ESPRE.2018.00009

Abstract:

When independent systems come together as a System of Systems (SoS) to achieve a new purpose, dealing with requirements conflicts across systems becomes a challenge. Moreover, assessing and modelling security risk for independent systems and the SoS as a whole is challenged by a gap in related research and approaches within the SoSs domain. In this paper, we present an approach for bridging SoS and Requirements Engineering by identifying aligning SoSs concepts to assess and model security risk and requirements. We introduce our OASoSIS approach modifying OCTAVE Allegro for SoSs using CAIRIS (Computer Aided Integration of Requirements and Information Security) with a medical evacuation (MEDEVAC) SoS exemplar for Security Requirements Engineering tool-support.

http://eprints.bournemouth.ac.uk/31177/

Source: Scopus