Application of Validation Obligations to Security Concerns

Stock, Sebastian; Mashkoor, Atif; Egyed, Alexander

doi:10.1007/978-3-031-14343-4\_31

by Sebastian Stock, Atif Mashkoor, Alexander Egyed

Abstract:

Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model’s completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.

View PDF

Reference:

Application of Validation Obligations to Security Concerns (Sebastian Stock, Atif Mashkoor, Alexander Egyed), In Database and Expert Systems Applications - DEXA 2022 Workshops - 33rd International Conference, DEXA 2022, Vienna, Austria, August 22-24, 2022, Proceedings (Gabriele Kotsis, A Min Tjoa, Ismail Khalil, Bernhard Moser, Alfred Taudes, Atif Mashkoor, Johannes Sametinger, Jorge Martínez Gil, Florian Sobieczky, Lukas Fischer, Rudolf Ramler, Maqbool Khan, Gerald Czech, eds.), Springer, volume 1633, 2022.

Bibtex Entry:

@Conference{DBLP:conf/dexaw/StockME22,
  author     = {Sebastian Stock and Atif Mashkoor and Alexander Egyed},
  booktitle  = {Database and Expert Systems Applications - {DEXA} 2022 Workshops - 33rd International Conference, {DEXA} 2022, Vienna, Austria, August 22-24, 2022, Proceedings},
  title      = {Application of Validation Obligations to Security Concerns},
  year       = {2022},
  editor     = {Gabriele Kotsis and A Min Tjoa and Ismail Khalil and Bernhard Moser and Alfred Taudes and Atif Mashkoor and Johannes Sametinger and Jorge Mart{\'{\i}}nez Gil and Florian Sobieczky and Lukas Fischer and Rudolf Ramler and Maqbool Khan and Gerald Czech},
  pages      = {337--346},
  publisher  = {Springer},
  series     = {Communications in Computer and Information Science},
  volume     = {1633},
  abstract   = {Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model’s completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.},
  bdsk-url-1 = {https://doi.org/10.1007/978-3-031-14343-4%5C_31},
  doi        = {10.1007/978-3-031-14343-4\_31},
  url        = {https://doi.org/10.1007/978-3-031-14343-4\_31},
}