Identifying Implicit Vulnerabilities Through Personas as Goal Models

Authors: Faily, S., Iacob, C., Ali, R., Ki-Aries, D.

Journal: Lecture Notes in Computer Science Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics

Publication Date: 01/01/2020

Volume: 12501 LNCS

Pages: 185-202

eISSN: 1611-3349

ISSN: 0302-9743

DOI: 10.1007/978-3-030-64330-0_12

Abstract:

When used in requirements processes and tools, personas have the potential to identify vulnerabilities resulting from misalignment between user expectations and system goals. Typically, however, this potential is unfulfilled as personas and system goals are captured with different mindsets, by different teams, and for different purposes. If personas are visualised as goal models, it may be easier for stakeholders to see implications of their goals being satisfied or denied, and designers to incorporate the creation and analysis of such models into the broader RE tool-chain. This paper outlines a tool-supported approach for finding implicit vulnerabilities from user and system goals by reframing personas as social goal models. We illustrate this approach with a case study where previously hidden vulnerabilities based on human behaviour were identified.

https://eprints.bournemouth.ac.uk/34422/

Source: Scopus

Identifying Implicit Vulnerabilities through Personas as Goal Models

Authors: Faily, S., Iacob, C., Ali, R., Ki-Aries, D.

Conference: 4th International Workshop on SECurity and Privacy Requirements Engineering (SECPRE 2020)

Dates: 14/09/2020

Publication Date: 16/12/2020

Publisher: Springer

DOI: 10.1007/978-3-030-64330-0_12

https://eprints.bournemouth.ac.uk/34422/

Source: Manual

Identifying Implicit Vulnerabilities through Personas as Goal Models.

Authors: Faily, S., Iacob, C., Ali, R., Ki-Aries, D.

Journal: CoRR

Publication Date: 2020

Volume: abs/2008.04773

https://eprints.bournemouth.ac.uk/34422/

Source: DBLP

Identifying Implicit Vulnerabilities through Personas as Goal Models

Authors: Faily, S., Iacob, C., Ali, R., Ki-Aries, D.

Publication Date: 11/08/2020

Abstract:

When used in requirements processes and tools, personas have the potential to identify vulnerabilities resulting from misalignment between user expectations and system goals. Typically, however, this potential is unfulfilled as personas and system goals are captured with different mindsets, by different teams, and for different purposes. If personas are visualised as goal models, it may be easier for stakeholders to see implications of their goals being satisfied or denied, and designers to incorporate the creation and analysis of such models into the broader RE tool-chain. This paper outlines a tool-supported approach for finding implicit vulnerabilities from user and system goals by reframing personas as social goal models. We illustrate this approach with a case study where previously hidden vulnerabilities based on human behaviour were identified.

https://eprints.bournemouth.ac.uk/34422/

Source: arXiv