Showing cs.CRShow all
3 papers · 1 filter
cs.CR2025
"Shifting Access Control Left" using Asset and Goal Models
Shamal Faily
Access control needs have broad design implications, but access control specifications may be elicited before, during, or after these needs are captured. Because access control kno…
cs.CR2025
Biting the CHERI bullet: Blockers, Enablers and Security Implications of CHERI in Defence
Shamal Faily
There is growing interest in securing the hardware foundations software stacks build upon. However, before making any investment decision, software and hardware supply chain stakeh…
cs.CR2020
Contextualisation of Data Flow Diagrams for security analysis
Shamal Faily, Riccardo Scandariato, Adam Shostack +2
Data flow diagrams (DFDs) are popular for sketching systems for subsequent threat modelling. Their limited semantics make reasoning about them difficult, but enriching them endange…