Towards Security Risk-Oriented Misuse Cases

Abstract

Abstract. Security has turn out to be a necessity of information systems (ISs) and information per se. Nevertheless, existing practices report on numerous cases when security aspects were considered only at the end of the development process, thus, missing the systematic security analysis. Misuse case diagrams help identify security concerns at early stages of the IS development. Despite this fundamental advantage, misuse cases tend to be rather imprecise; they do not comply with security risk management strategies, and, thus, could lead to misinterpretation of the security-related concepts. Such limitations could potentially result in poor security solutions. This paper applies a systematic approach to understand how misuse case diagrams could help model organisational assets, potential risks, and security countermeasures to mitigate these risks. The contribution helps understand how misuse cases could deal with security risk management and support reasoning for security requirements and their implementation in the software system. Keywords: Security risk management, Misuse cases, Security engineering, Information system security IntroductionDuring the last two decades, line between digital and social life is diminishing, leading that modern society is mainly dependent on information system (IS) and its security. The demand for IS security is constantly growing. Also developing and maintaining system security is increasingly gaining attention. Consideration of IS security at the early stages of software development is also acknowledged in [18]. The security breaches in IS can lead to the negative consequences. The practitioners of IS security must inspect security threats with a negative perspective from the very beginning of IS development process. Consideration of security at early development stages assists to analyse and estimate security measures of the IS to be developed. This paper discusses the security risk management at requirement elicitation and analysis stage. We will consider the question "how security risk management could be addressed using misuse case diagrams?". To answer this question we analyse misuse cases proposed by Sindre and Opdahl [18]. The misuse case diagrams [17,18] are one of the possible techniques to relate security analysis and functional requirements of software systems. The main goal is to model negative scenarios with respect to func-

Enhancing Misuse Cases With Risk Assessment for Safety Requirements

“…This section gives a detailed review of related studies in the areas of misuses cases with risk assessment for improving safety. Misuse case has been investigated in the light of security, security risk management, security risk assessment and similar aspects as evidenced in [26]- [28].…”

Survey on information system security risk management alignment

“…The contribution in [23] helps modeling and analyzing the system from an attacker (misuser) perspective which increases the chance of identifying threats that would have been ignored. Malicious behaviors are modeled by misuse cases that target use cases and countermeasures as security use cases that mitigate misuse cases.…”

From Risk Analysis to the Expression of Security Requirements for Systems Information

“…To remedy this problem of guiding and integrating risk analysis for eliciting security requirements, there were alignments for based risk analysis methods those which don't use it, e.g: ISSRM / Secure Tropos [24], ISSRM / Misuse Cases [45], ISSRM / Mal activity [6], but these methods are semi-formal and don't offer full guidance.…”