2 papers
cs.SE2020
Identifying Implicit Vulnerabilities through Personas as Goal Models
Shamal Faily, Claudia Iacob, Raian Ali +1
When used in requirements processes and tools, personas have the potential to identify vulnerabilities resulting from misalignment between user expectations and system goals. Typic…
cs.CR2020
Contextualisation of Data Flow Diagrams for security analysis
Shamal Faily, Riccardo Scandariato, Adam Shostack +2
Data flow diagrams (DFDs) are popular for sketching systems for subsequent threat modelling. Their limited semantics make reasoning about them difficult, but enriching them endange…