Application of Validation Obligations to Security Concerns

Stock, Sebastian; Mashkoor, Atif; Egyed, Alexander

by Sebastian Stock, Atif Mashkoor and Alexander Egyed

Abstract:

Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model's completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.

Reference:

Sebastian Stock, Atif Mashkoor and Alexander Egyed: Application of Validation Obligations to Security Concerns, in Database and Expert Systems Applications - DEXA 2022 Workshops (Kotsis, Gabriele, Tjoa, A. Min, Khalil, Ismail, Moser, Bernhard, Taudes, Alfred, Atif Mashkoor, Johannes Sametinger, Martinez-Gil, Jorge, Sobieczky, Florian, Fischer, Lukas, Rudolf Ramler, Khan, Maqbool, Czech, Gerald, eds.), Springer International Publishing, 2022.

Bibtex Entry:

@InProceedings{Stock2022,
  author    = {Sebastian Stock and Atif Mashkoor and Alexander Egyed},
  booktitle = {Database and Expert Systems Applications - DEXA 2022 Workshops},
  title     = {Application of Validation Obligations to Security Concerns},
  year      = {2022},
  address   = {Cham},
  editor    = {Kotsis, Gabriele and Tjoa, A. Min and Khalil, Ismail and Moser, Bernhard and Taudes, Alfred and Atif Mashkoor and Johannes Sametinger and Martinez-Gil, Jorge and Sobieczky, Florian and Fischer, Lukas and Rudolf Ramler and Khan, Maqbool and Czech, Gerald},
  pages     = {337--346},
  publisher = {Springer International Publishing},
  abstract  = {Our lives become increasingly dependent on safety- and security-critical systems, so formal techniques are advocated for engineering such systems. One of such techniques is validation obligations that enable formalizing requirements early in development to ensure their correctness. Furthermore, validation obligations help hold requirements consistent in an evolving model and create assurances about the model's completeness. Although initially proposed for safety properties, this paper shows how the technique of validation obligations enables us to also reason about security concerns through an example from the medical domain.},
  isbn      = {978-3-031-14343-4},
}