文章基本信息

标题：A Fuzzy-Based Technique for Describing Security Requirements of Intrusion Tolerant Systems
本地全文：下载
作者：Davoud Mougouei ; Wan Nurhayati Wan Ab. Rahman
期刊名称：International Journal of Software Engineering and Its Applications
印刷版ISSN：1738-9984
出版年度：2013
卷号：7
期号：2
出版社：SERSC
摘要：To care for security in early stages of software development has always been a major engineering trend. However, due to the existence of unpreventable and accidental security faults within the system, it is not always possible to entirely identify and mitigate the security threats. This may eventually lead to security failure of the target system. To avoid security failure, it is required to incorporate fault tolerance (i.e. intrusion tolerant) into the security requirements of the system. In this paper, we propose a new technique toward description of security requirements of Intrusion Tolerant Systems (ITS) using fuzzy logic. We care for intrusion tolerance in security requirements of the system through considering partial satisfaction of security goals. This partiality is accepted and formally described through establishment of a Goal-Based Fuzzy Grammar (GFG) and its respective Goal-Based Fuzzy Language (GFL) for describing Security Requirement Model (SRM) of the target ITS.
关键词：Security fault; Security goal; Intrusion tolerance; Goal-Based fuzzy grammar