Security Risk-Aware Secure Tropos

Fundamentals of
Secure System Modelling

Springer, 2017
Chapter 6:
Security Risk-Aware
Secure Tropos
Raimundas Matulevičius
University of Tartu, Estonia, rma@ut.ee
© Springer International Publishing AG 2017

Goal
• Explain how security risks can be captured
through organisation’s goals
• Understand how security risk management
could be performed using Secure Tropos
© Springer International Publishing AG 2017 2

Outline
• Tropos and Secure Tropos
• Security risk management
– Abstract and concrete syntax
– Semantics
• Example
• Further reading

Outline
– Semantics
• Example
• Further reading

Goal modelling
• Approach
– Focus on why a system is required
– Use goal refinement to arrive at specific
requirements
– Goal analysis
• document, organize and classify goals
– Goal hierarchy
• Refinements and alternatives
• Advantages
– Reasonably intuitive
– Explicit declaration of goals provides sound
basis for conflict resolution
• Disadvantages
– Captures a static picture
– Can regress forever up (or down) the goal hierarchy
Goal modelling

Goal modelling
• Early requirements
• Late requirements
• Architecture design
• Detailed design

Tropos Constructs

Secure Tropos Constructs

Secure Tropos

Secure Tropos
• Security constraint
– Restriction related to the security of the
system
– Influence the analysis and design of a
system
– Restricts alternative design solutions
• Secure dependency
– Introduces security constraint(s) that must
be fulfilled for the dependency to be
satisfied

Outline
– Semantics
• Example
• Further reading

Abstract and Concrete syntax
Actor model

Actor model

Actor model
15
Actor model
16
Actor model
17
Goal model
18
Goal model
19
Goal model
20
Goal model
21
Relationships to Security Constraints
22
23
24
25
26
Relationships in Attack Scenario
27
28
29
30
31
Outline
– Semantics
• Example
• Further reading

Asset-related concepts
33

Risk-related concepts
34

Risk-related concepts
35

Risk treatment-related concepts
36

Outline
– Semantics
• Example
• Further reading

Security risk
management process

Context and Assets Identification
• Description of organisation and its environment

– sensitive activities related to information security
39 © Springer International Publishing AG 2017 39

Security Objectives Determination
• Determine the security objectives to be reached
– Confidentiality, Integrity, Availability
40 40
Risk Analysis and Assessment
• Identify risks and estimate them qualitatively or
quantitatively
41 41
Risk Analysis and Assessment
• Identify risks and estimate them qualitatively or
quantitatively
42 42
Risk Treatment Decisions
Risk treatment Definition

decisions
Avoiding risk Decision not to be involved in, or to
withdraw from a risk
Transferring risk Sharing with another party the
burden of loss for a risk
Retaining risk Accepting the burden of loss from a
risk
Reducing risk Action to lessen the probability,
negative consequences, or both,
associated with a risk
43 43
Security Requirements Definition
• Security requirements - security solutions to
mitigate the risks
• If security requirements are unsatisfactory

– Revise the risk treatment step
– Revise all of the preceding steps 44
44
Control Selection and Implementations
• Implement system countermeasures within
organisation
45 45
Outline
– Semantics
• Example
• Further reading

Further reading
• Trust, delegation, provisioning, and ownership
[Giorgini et al., 2005]
• Goal risk-driven assessment [Asnar et al., 2011]
• Three-layer security analysis framework

[Li and Horkoff, 2014]
• Socio-technical system development

[Dalpiaz ei al., 2016]

Ilhan Çelebi, Privacy Enhanced Secure Tropos: A
Privacy Modeling Language for GDPR Compliance,
Master thesis, University of Tartu, 2018
Swedbank employees' technical thesis award
<https://www.cs.ut.ee/en/news/institute-computer-
science-alumnus-won-swedbank-thesis-award> 48
Summary
– Semantics
• Example
• Further reading

Security Risk-Aware Secure Tropos

Uploaded by

Copyright:

Available Formats

Security Risk-Aware Secure Tropos

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Security Risk-Aware Secure Tropos

Uploaded by

Copyright:

Available Formats

Fundamentals of

Secure System Modelling

© Springer International Publishing AG 2017

© Springer International Publishing AG 2017 2

© Springer International Publishing AG 2017 3

© Springer International Publishing AG 2017 4

© Springer International Publishing AG 2017 6

© Springer International Publishing AG 2017 7

© Springer International Publishing AG 2017 8

© Springer International Publishing AG 2017 9

© Springer International Publishing AG 2017 10

© Springer International Publishing AG 2017 11

© Springer International Publishing AG 2017 12

© Springer International Publishing AG 2017 13

© Springer International Publishing AG 2017 14

Relationships to Security Constraints

Relationships to Security Constraints

Relationships to Security Constraints

Relationships to Security Constraints

Relationships to Security Constraints

Relationships in Attack Scenario

Relationships in Attack Scenario

Relationships in Attack Scenario

Relationships in Attack Scenario

Relationships in Attack Scenario

© Springer International Publishing AG 2017 32

© Springer International Publishing AG 2017

© Springer International Publishing AG 2017

© Springer International Publishing AG 2017

© Springer International Publishing AG 2017

© Springer International Publishing AG 2017 37

© Springer International Publishing AG 2017 38

• Description of organisation and its environment

39 © Springer International Publishing AG 2017 39

Risk treatment Definition

• If security requirements are unsatisfactory

© Springer International Publishing AG 2017 46

• Goal risk-driven assessment [Asnar et al., 2011]

• Three-layer security analysis framework

• Socio-technical system development

© Springer International Publishing AG 2017 47

© Springer International Publishing AG 2017 49

You might also like