A Security-Oriented Enhancement to the Tropos Methodology
K. Suresh Babu · International Journal for Research in Applied Science and Engineering Technology · 2017
Now-a-days the usage of social networks by people is increasing gradually, also the social networks increasingly becoming the primary channel for dispersal of information. The social networks, from the last few years, in addition to dispersal of information they are also used by banks and payment industries. These industries are actively developing mechanisms to facilitate transfer of money over social media. So in this work we try to evaluate the information security aspects over social networks using some open source tools. In this we use Secure Tropos, a security oriented extension to the tropos methodology, to model various possible interactions on the popular social networking website Facebook. Tropos methodology uses the concepts like actors, goals and the possible interactions among them. In this work we use secure tropos to analyze the confidentiality, integrity and availability requirements of information security. In the process we evaluate the tools ability to capture known flaws in the security model of Facebook.