A review on security requirements specification by formal methods

Abstract

Security is an afterthought process for the development of software in earlier days but now the time has been changed. Now, security is on top priority and involved from the beginning of software development. Security requirements are the prime concern for the development and quality of any software product. The specification and verification of security requirements need a lot of attention from the computer science community in the process of the software development life cycle. Formal Methods are a widely used and well-recognized approach for the specification and verification of any safety-critical system. Formal methods play an important role in the requirement phase to the design phase of software development. In this study, we summarized the outcomes of related papers to find out the current state of the art in the proposed area.In this manuscript, three research questions are frame and we try to find the answer to these research questions to the best of our effort and knowledge. The objective of this research paper is to find out the gap analysis, state of art, and trends in the proposed area. The academician needs to pursue more effort toward the formal specification of security requirements, providing a deeper understanding to help security experts in the development of systems.

Exploring Cybersickness Experiences via a Markov Chain Model

“…Formal methods are rigorous, mathematically-based approaches that have demonstrated their ability to verify systems across critical properties such as reliability, safety, security, more generally, dependability and performance [9]. A full overview of formal methods for system analysis is outside the scope of the current work (for recent systematic reviews see [2], [17]) but our interest is in how formal methods, specifically the use of modelling, can be used to gain insight from systems involving humans.…”

Empirical Formal Methods: Guidelines for Performing Empirical Studies on Formal Methods

“…It considers 38 high-quality studies from a period of 15 years and the findings include a clear predominance of the use of manual proof methods, Dolev-Yao-like attack models, and the AVISPA tool [197]. Furthermore, the work by Mishra and Mustafa [198] is claimed to be the first SLR on FM focusing on the security requirement specification. It considers 88 studies from the last 20 years and it is observed that model checking is preferred over theorem proving, while it remains a research challenge to effectively use FM in a cost-effective and time-saving way.…”