Designing Security Requirements Models Through Planning
Volha Bryl, Fabio Massacci, John Mylopoulos, Nicola Zannone, Volha Bryl, Fabio Massacci, John Mylopoulos, Nicola Zannone · Unitn Eprints Research (Università Degli Studi di Trento) · 2006
Abstract. The quest for designing secure and trusted software has led to re-fined Software Engineering methodologies that rely on tools to support the de-sign process. Automated reasoning mechanisms for requirements and software verification are by now a well-accepted part of the design process, and model driven architectures support the automation of the refinement process. We claim that we can further push the envelope towards the automatic exploration and se-lection among design alternatives and show that this is concretely possible for Se-cure Tropos, a requirements engineering methodology that addresses security and trust concerns. In Secure Tropos, a design consists of a network of actors (agents, positions or roles) with delegation/permission dependencies among them. Ac-cordingly, the generation of design alternatives can be accomplished by a planner which is given as input a set of actors and goals and generates alternative multi-agent plans to fulfill all given goals. We validate our claim with a case study using a state-of-the-art planner. 1