Deakin University
Browse

File(s) not publicly available

Evaluating fault tolerance in security requirements of web services

conference contribution
posted on 2023-02-07, 22:43 authored by D Mougouei, WNWA Rahman, M Moein Almasi
It is impossible to identify all of the internal and external security faults (vulnerabilities and threats) during the security analysis of web services. Hence, complete fault prevention would be impossible and consequently a security failure may occur within the system. To avoid security failures, we need to provide a measurable level of fault tolerance in the security requirements of target web service. Although there are some approaches toward assessing the security of web services but still there is no well-defined evaluation model for security improvement specifically during the requirement engineering phase. This paper introduces a measurement model for evaluating the degree of fault tolerance (FTMM) in security requirements of web services by explicitly factoring the mitigation techniques into the evaluation process which eventually contributes to required level of fault tolerance in security requirements. Our approach evaluates overall tolerance of the target service in the presence of the security faults through evaluating the computational security requirement model (SRM) of the service. We measure fault tolerance of the target web service by taking into consideration the cost, technical ability, impact and flexibility of the security goals established to mitigate the security faults. © 2012 IEEE.

History

Volume

1

Pagination

111-116

Start date

2012-06-26

End date

2012-06-28

ISBN-13

9781467314251

Title of proceedings

Proceedings 2012 International Conference on Cyber Security, Cyber Warfare and Digital Forensic, CyberSec 2012

Event

2012 International Conference on Cyber Security, Cyber Warfare and Digital Forensic (CyberSec)

Publisher

IEEE

Usage metrics

    Research Publications

    Categories

    No categories selected

    Exports

    RefWorks
    BibTeX
    Ref. manager
    Endnote
    DataCite
    NLM
    DC