Dissertation > Excellent graduate degree dissertation topics show

Requirements Documentation Based Security Contract Elicitation and Its Implementation

Author: LiuZuo
Tutor: JinYing
School: Jilin University
Course: Computer Software and Theory
Keywords: Software Security Active defense Software threat Software security needs Security contract Petri nets
CLC: TP311.52
Type: Master's thesis
Year: 2011
Downloads: 41
Quote: 0
Read: Download Dissertation

Abstract

Active defense protection method is to capture the security needs of the system, in the requirements phase of the software development and security needs as contract guidance software development architecture design phase activities. Active defense norms and effective implementation of software security activities. Contract task requirements phase safety is the foundation and key of the software active defense, it will directly affect the subsequent phases of the software security protection. However, the formation of the security contract is the hardest to the finished part. There is still a gulf from the original text of the demand to the formation of the security deed, its performance: 1. Difficult from the original software needs can be obtained directly meet the software system's security needs. Difficult to quickly and effectively analyze the security vulnerabilities in the software requirements. 3. Defined security requirements is difficult to explain the effectiveness and practicality. How strictly accurate to define the security deed. In response to these problems, starting from the software requirements document focuses on the acquisition, analysis and modeling methods demand text-based security contract. First proposed a method based on the action concerns for security needs and concerns modeling method based on the actions of the CSP process algebra: then, given a four-tuple security attributes as the action concerns the threat analysis of business processes, while establishing a a threat to the matching rules, the combined security knowledge base rules and ECMA threat exists in business processes can automatically access, and also determine the strategy of the threat, and a true reflection of software systems acquired threats facing security problems ; later, security needs to address security threats by ECMA's security Knowledge Base, and gives the methods and strategies to determine security needs, the acquired security requirements more in line with the actual needs of software product safety; Finally, the combination of oriented requirements engineering aspects of thinking, given the security contract to establish methods based on Petri nets, established security requirements contract to provide guidance for the follow-up to the software design phase. Based on the method proposed in this paper, the design and implementation support tools can help users to establish a secure contract from the original text of the demand. In addition, the original demand text of the proposed method is applied to the online commodities trading system, better established appropriate security contract illustrates the feasibility and effectiveness of this method.

Related Dissertations

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer software > Program design,software engineering > Software Engineering > Software Development
© 2012 www.DissertationTopic.Net Mobile