156
views
0
recommends
+1 Recommend
1 collections
    0
    shares
      • Record: found
      • Abstract: found
      • Conference Proceedings: found
      Is Open Access

      Secure System? Challenge Accepted: Finding and Resolving Security Failures Using Security Premortems

      , ,

      The 26th BCS Conference on Human Computer Interaction (HCI)

      Human Computer Interaction

      12 - 14 September 2012

      Risk, Premortem, CAIRIS

      Read this article at

      Bookmark
          There is no author summary for this article yet. Authors can add summaries to their articles on ScienceOpen to make them more accessible to a non-specialist audience.

          Abstract

          Risk–driven approaches are dominant in secure systems design; these aim to elicit and treat vulnerabilities and the threats exploiting them. Such approaches, however, are so focused on driving risks out of system design, they fail to recognise the usefulness of failure as a vehicle for security innovation. To explore the role of failure as a design tool, we present the security premortem: a participative design technique where participants assume that a system has been exploited, and plausible reasons are given for explaining why. We describe this approach and illustrate how software tools can be used to support it.

          Related collections

          Most cited references 5

          • Record: found
          • Abstract: not found
          • Article: not found

          Eliciting security requirements with misuse cases

            Bookmark
            • Record: found
            • Abstract: not found
            • Conference Proceedings: not found

            A meta-model for usable secure requirements engineering

              Bookmark
              • Record: found
              • Abstract: not found
              • Conference Proceedings: not found

              Here's Johnny: A Methodology for Developing Attacker Personas

                Bookmark

                Author and article information

                Contributors
                Conference
                September 2012
                September 2012
                : 1-4
                Affiliations
                Department of Computer Science

                University of Oxford
                School of Computer Science

                Newcastle University
                Article
                10.14236/ewic/HCI2012.66
                © Shamal Faily et al. Published by BCS Learning and Development Ltd. The 26th BCS Conference on Human Computer Interaction, Birmingham, UK

                This work is licensed under a Creative Commons Attribution 4.0 Unported License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/

                The 26th BCS Conference on Human Computer Interaction
                HCI
                26
                Birmingham, UK
                12 - 14 September 2012
                Electronic Workshops in Computing (eWiC)
                Human Computer Interaction
                Product
                Product Information: 1477-9358BCS Learning & Development
                Self URI (journal page): https://ewic.bcs.org/
                Categories
                Electronic Workshops in Computing

                Comments

                Comment on this article