Improved Security Requirements Engineering using Knowledge Representation - Télécom Paris Access content directly
Conference Papers Year : 2014

Improved Security Requirements Engineering using Knowledge Representation


We introduce in this paper a security meta-model for our SysML-Sec framework, developed to improve the security requirements engineering process through the explicit representation of security concerns with knowledge representation techniques. This meta-model enables the specification of ontological concepts which define the semantics of the security artifacts introduced through SysML-Sec diagrams. This meta-model also enables representing the relationships that tie several such concepts together. This representation is then used for reasoning about the knowledge introduced by system designers as well as security experts through the graphical environment of the SysML-Sec framework. In addition to its documentary aspect, such a meta-model makes it possible to introduce different types of verifications of security requirements and threats, and especially consistency checks regarding the content of all diagrams. We finally present a prototype that integrates meta-model descriptions into the SysML-Sec framework and its implementation using Semantic Web technologies.
No file

Dates and versions

hal-02412085 , version 1 (15-12-2019)


  • HAL Id : hal-02412085 , version 1


Yves Roudier, Muhammad Sabir Idrees, Ludovic Apvrille. Improved Security Requirements Engineering using Knowledge Representation. 9ème conférence sur la Sécurité des Architectures Réseaux et des Systèmes d'Information, May 2014, Lyon, France. ⟨hal-02412085⟩
57 View
0 Download


Gmail Facebook X LinkedIn More