TY - GEN
T1 - CoSMo: An Approach Towards Conceptual Security Modeling
AU - Artelsmair, Christine
AU - Essmayr, Wolfgang
AU - Lang, Peter
AU - Wagner, Roland
AU - Weippl, Edgar
PY - 2002/9
Y1 - 2002/9
N2 - Security is generally believed to be a very important topic. However, during
software development security requirements are hardly ever properly treated,
least of all on the conceptual level. Security is considered as some kind of
add-on which will be applied to the system after development. To fill this
gap we work on the development of a conceptual security modeling method we
refer to as CoSMo (Conceptual Security Modeling). In this paper first a
comprehensive summary of available security modeling methodologies is
presented. Second, various security requirements and mechanisms which are
necessary for building secure software systems are described systematically
to give a clear distinction between requirements and mechanisms to enforce
the security requirements. Finally, a modeling example is given to
illustrate particular security requirements and mechanisms.
AB - Security is generally believed to be a very important topic. However, during
software development security requirements are hardly ever properly treated,
least of all on the conceptual level. Security is considered as some kind of
add-on which will be applied to the system after development. To fill this
gap we work on the development of a conceptual security modeling method we
refer to as CoSMo (Conceptual Security Modeling). In this paper first a
comprehensive summary of available security modeling methodologies is
presented. Second, various security requirements and mechanisms which are
necessary for building secure software systems are described systematically
to give a clear distinction between requirements and mechanisms to enforce
the security requirements. Finally, a modeling example is given to
illustrate particular security requirements and mechanisms.
UR - https://www.scopus.com/pages/publications/84863584576
U2 - 10.1007/3-540-46146-9_55
DO - 10.1007/3-540-46146-9_55
M3 - Conference proceedings
SN - 3540441263
SN - 9783540441267
VL - 2453
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 557
EP - 566
BT - Proceedings 13th International Conference on Database and Expert Systems Applications - DEXA 2002
A2 - Hameurlain, Abdelkader
A2 - Cicchetti, Rosiner
A2 - Traunmuller, Roland
ER -