Enhancing Secure Tropos to Effectively Deal with Security Requirements in the Development of Multiagent Systems

Abstract

Abstract. The consideration of security requirements in the development of multi-agent systems is a very difficult task. However, only few approaches have been proposed that try to integrate security issues as internal part of the development process. Amongst them, secure Tropos has been proposed as a structured approach towards the consideration of security issues in the development of multiagent systems. In this paper we enhance secure Tropos by integrating to its stages: (i) a process for selecting amongst alternative architectural styles using as criteria the security requirements of the system; (ii) a pattern-based approach to transform security requirements to design, and (iii) a security attack scenarios approach to test the developed solution. The electronic single assessment process (eSAP) case study is used to illustrate our approach.

Using Model Driven Security Approaches in Web Application Development

“…There are four different abstraction layers defined that describe different stages of requirements and layers of design. Secure Tropos [8] is an extension to the original Tropos methodology by adding security constraints and secure entities as well as the concepts of ownership, trust and dependency. The Secure Tropos methodology does not allow the designer to model any OWASP TOP 10 threat directly within the model, still there are some software solutions, like ScTro 2 , that support the software engineer during the design and requirements analysis phase.…”

A comparison of security requirements engineering methods

“…There exist two extensions of Tropos called Secure Tropos: one by Mouratidis et al [60][61][62], and another one by Massacci et al [63]. Furthermore, there exists an extension of the i * -modeling framework called Secure i • Security constraint: A security constraint is defined as ''a restriction related to security issues, such as privacy, integrity and availability, which can influence the analysis and design of a multiagent system under development by restricting some alternative design solutions, by conflicting with some of the requirements of the system, or by refining some of the system's objectives.''…”

Adapting Secure Tropos for Security Risk Management in the Early Phases of Information Systems Development

“…7) is the actor's knowledge of the world. All these constructs are present in both Tropos [23] [24] and Secure Tropos [9], [21], [22]. In addition Secure TROPOS introduces Security constraint and Threat.…”

“…A security constraint represents a restriction related to security that the system must have and actors must respect (see Fig. 3) [5] [21]. A threat (see Fig.…”

“…Secure dependency introduces security constraint(s) that must be respected by actors for the dependency to be satisfied [25]. This means that "the depender expects from the dependee to satisfy the security constraint(s) and also that the dependee will make effort to deliver the dependum by satisfying the security constraint(s)" [21]. The goal model allows a deeper understanding of actors' reasoning about goals to be fulfilled, plans to be performed and available resources [24].…”