Requirements Engineering meets trust management: Model, methodology, and reasoning
Paolo Giorgini, Fabio Massacci, John Mylopoulos, Nicola Zannone · Unitn Eprints Research (Università Degli Studi di Trento) · 2004
Abstract. The last years have seen a number of proposals to incorpo-rate Security Engineering into mainstream Software Requirements Engi-neering. However, capturing trust and security requirements at an orga-nizational level (as opposed to a design level) is still an open problem. This paper presents a formal framework for modeling and analyzing se-curity and trust requirements. It extends the Tropos methodology, an agent-oriented software engineering methodology. The key intuition is that in modeling security and trust, we need to distinguish between the actors that manipulate resources, accomplish goals or execute tasks, and actors that own the resources or the goals. To analyze an organization and its information systems, we proceed in two steps. First, we built a trust model, determining the trust relationships among actors, and then we give a functional model, where we analyze the actual delegations against the trust model, checking whether an actor that offers a service is authorized to have it. The formal framework allows for the automatic verification of security and trust requirements by using a suitable delegation logic that can be mechanized within Datalog. To make the discussion more concrete, we illustrate the proposal with a Health Care case study.