A Security Specification Library with a Schemaless Database

Abstract

Abstract. In order to develop highly secure information systems, it is important to make a security specification of the systems, although it requires heavy labor. Thus database technologies have been applied to software engineering and information security engineering for practical reuse of security specifications. However, because the specifications do not have fixed layout, it is difficult to develop a flexible and useful library for the documents with conventional database technologies. Therefore, this paper proposes a security specification library with a schemaless native XML database. Users of the library can directly store and manage security specifications with any layout. Consequently, the library mitigates the labor for making security specifications.

Tracing security requirements in industrial control systems using graph databases

“…An approach to store security requirements in a schemaless XML database has been discussed in [29]. However, this approach is semi-automated and only supports the representation of a tree-structured graph data model.…”

IASelect: Finding Best-fit Agent Practices in Industrial CPS Using Graph Databases

“…For instance, in [10] authors discuss an approach to store information related to security standards in relational databases and Structured Query Language (SQL) is used for data retrieval. In [11], authors have discussed an approach to store security requirements in a schema less XML database. However, a database with no schema based restrictions has higher risk of data corruption.…”