Application of Validation Obligations to Security Concerns

Stock, Sebastian; Mashkoor, Atif; Egyed, Alexander

by Sebastian Stock, Atif Mashkoor, Alexander Egyed

Abstract:

Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model's completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.

Reference:

Application of Validation Obligations to Security Concerns (Sebastian Stock, Atif Mashkoor, Alexander Egyed), (Gabriele Kotsis, A. Min Tjoa, Ismail Khalil, Bernhard Moser, Alfred Taudes, Atif Mashkoor, Johannes Sametinger, Jorge Martinez-Gil, Florian Sobieczky, Lukas Fischer, Rudolf Ramler, Maqbool Khan, Gerald Czech, eds.), Springer International Publishing, 2022.

Bibtex Entry:

@InProceedings{Stock2022,
  author    = {Stock, Sebastian and Mashkoor, Atif and Egyed, Alexander},
  booktitle = {Database and Expert Systems Applications - DEXA 2022 Workshops},
  title     = {Application of Validation Obligations to Security Concerns},
  year      = {2022},
  address   = {Cham},
  editor    = {Kotsis, Gabriele and Tjoa, A. Min and Khalil, Ismail and Moser, Bernhard and Taudes, Alfred and Mashkoor, Atif and Sametinger, Johannes and Martinez-Gil, Jorge and Sobieczky, Florian and Fischer, Lukas and Ramler, Rudolf and Khan, Maqbool and Czech, Gerald},
  pages     = {337--346},
  publisher = {Springer International Publishing},
  abstract  = {Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model's completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.},
  isbn      = {978-3-031-14343-4},
}