Secure Tropos: A Security-Oriented Extension of the Tropos methodology

Although security plays an important role in the development of multiagent systems, a careful analysis of software development processes shows that the definition of security requirements is, usually, considered after the design of the system. One of the reasons is the fact that agent oriented software engineering methodologies have not integrated security concerns throughout their developing stages. The integration of security concerns during the whole range of the development stages can help towards the development of more secure multiagent systems. In this paper we introduce extensions to the Tropos methodology to enable it to model security concerns throughout the whole development process. A description of the new concepts and modelling activities is given along with a discussion on how these concepts and modelling activities are integrated to the current stages of Tropos. A real life case study from the health and social care sector is used to illustrate the approach.

Eliciting Security Requirements and Tracing them to Design: An Integration of Common Criteria, Heuristics, and UMLsec

Building secure systems is difficult for many reasons. This paper deals with two of the main challenges: (i) the lack of security expertise in development teams, and (ii) the inadequacy of existing methodologies to support developers who are not security experts. The security standard ISO 14508 (Common Criteria) together with secure design techniques such as UMLsec can provide the security expertise, knowledge, and guidelines that are needed. However, security expertise and guidelines are not stated explicitly in the Common Criteria. They are rather phrased in security domain terminology and difficult to understand for developers. This means that some general security and secure design expertise are required to fully take advantage of the Common Criteria and UMLsec. In addition, there is the problem of tracing security requirements and objectives into solution design,which is needed for proof of requirements fulfilment. This paper describes a security requirements engineering methodology called SecReq. SecReq combines three techniques: the Common Criteria, the heuristic requirements editorHeRA, andUMLsec. SecReqmakes systematic use of the security engineering knowledge contained in the Common Criteria and UMLsec, as well as security-related heuristics in the HeRA tool. The integrated SecReq method supports early detection of security-related issues (HeRA), their systematic refinement guided by the Common Criteria, and the ability to trace security requirements into UML design models. A feedback loop helps reusing experiencewithin SecReq and turns the approach into an iterative process for the secure system life-cycle, also in the presence of system evolution.

Civil defence pedagogies and narratives of democracy: disaster education in Germany

‘Disaster education’ is a fledgling area of study in lifelong education. Many countries educate their populations for disasters, to mitigate potential damage and loss of life, as well as contribute to national security. In this paper, which draws on interview data from the German Federal Office for Civil Defence and Disaster Assistance and the Federal Agency for Technical Relief, archival research, analysis of websites and promotional materials as well as relevant academic literature, I examine disaster education and preparedness for national emergencies in Germany. I argue that it is not generally extended to the general public, rather confined to trained experts, decentralised, localised and exclusive. Theorising disaster education as a ‘civil defence pedagogy’ (Preston, 2008), a type of public pedagogy, which contributes to shaping narratives of national identity, I argue that it is unlikely that Germany will develop a more inclusive, universal, formalised, nor high-profile campaign in disaster education in the foreseeable future. This, I suggest, is due to narratives of the German democratic nation state as secure, federal, peaceful and unified, which originated at the founding of West Germany in 1949, and continue to shape contemporary political narratives.