Orchestrating Security and System Engineering for Evolving Systems

Fabio Massacci; Fabrice Bouquet; Elizabeta Fourneret; Jan Jurjens; Mass Lund; Sébastien Madelénat; JanTobias Muehlberg; Federica Paci; Stéphane Paul; Frank Piessens; Bjornar Solhaug; Sven Wenzel

hal-00649258, version 1

Orchestrating Security and System Engineering for Evolving Systems

Fabio Massacci ¹, Fabrice Bouquet ², Elizabeta Fourneret ², Jan Jurjens ³, Mass Lund ⁴, Sébastien Madelénat ⁵, JanTobias Muehlberg ⁶, Federica Paci ¹, Stéphane Paul ⁷, Frank Piessens ⁸, Bjornar Solhaug ⁴, Sven Wenzel ³

4th European Conference, Towards a Service-Based Internet - ServiceWave 2011 6994 (2011) 134--143

1: Department of Information Engineering and Computer Science (DISI)
http://disi.unitn.it/
University of Trento, Italy Dipartimento di Ingegneria e Scienza dell'Informazione Via Sommarive, 14 I-38123 POVO tel. (+39) 0461 882092 fax: (+39) 0461 882093 E-mail: disi@disi.unitn.it Italy
2: CASSIS (INRIA Lorraine - LORIA / LIFC)
INRIA – CNRS : FRE2661 – Université de Franche-Comté – Université Henri Poincaré - Nancy I – Université Nancy II – Institut National Polytechnique de Lorraine (INPL) France
3: Dortmund University of Technology
http://www.tu-dortmund.de/uni/International/index.html
Dortmund University of Technology Germany
4: The Foundation for Scientific and Industrial Research (SINTEF)
http://www.sintef.no/
SINTEF P.O. Box 124 Blindern N-0314 Oslo, Norway Norway
5: Thales Research and Technologies [Orsay] (TRT)
http://www.thalesgroup.com/
THALES Domaine de Corbeville, 91404 Orsay CEDEX ,France France
6: Department of Computer Science - K.U.Leuven
Katholieke Universiteit Leuven K.U.Leuven Department of Computer Science Celestijnenlaan 200A - bus 2402 B-3001 Heverlee (Leuven) Belgium Belgium
7: Thales Communications [Colombes]
http://www.thalesgroup.com/
THALES 160 Bd de Valmy, BP 82 92704 Colombes cedex, France France
8: Machine Intelligence and Imaging Research Group (ESAT)
Université Catholique de Louvain (UCL) - Belgique – Katholieke Universiteit Leuven Machine Intelligence and Imaging Research Group, Department of Electrical Engineering (E.S.A.T.), Katholieke Universiteit Leuven, Kurd. Mercierlaan 94, B--3001 Leuven (Heverlee), Belgium Belgium

Bibliographic reference

hal-00649258, version 1
http://hal.inria.fr/hal-00649258
oai:hal.inria.fr:hal-00649258
From: Fabrice Bouquet <>
Submitted on: Wednesday, 7 December 2011 15:07:12
Updated on: Monday, 24 September 2012 14:43:06

See short view

Associated documents

DOI: 10.1007/978-3-642-24755-2_12

Full text from publisher

Export

Bibtex EndNote TEI RefWorks

%% hal-00649258, version 1
%% http://hal.inria.fr/hal-00649258
@inproceedings{massacci:hal-00649258,
    hal_id = {hal-00649258},
    url = {http://hal.inria.fr/hal-00649258},
    title = {{Orchestrating Security and System Engineering for Evolving Systems}},
    author = {Massacci, Fabio and Bouquet, Fabrice and Fourneret, Elizabeta and Jurjens, Jan and Lund, Mass and Madel{\'e}nat, S{\'e}bastien and Muehlberg, JanTobias and Paci, Federica and Paul, St{\'e}phane and Piessens, Frank and Solhaug, Bjornar and Wenzel, Sven},
    abstract = {{How to design a security engineering process that can cope with the dynamic evolution of Future Internet scenarios and the rigidity of existing system engineering processes? The SecureChange approach is to orchestrate (as opposed to integrate) security and system engineering concerns by two types of relations between engineering processes: (i) vertical relations between successive security-related processes; and (ii) horizontal relations between mainstream system engineering processes and concurrent security-related processes. This approach can be extended to cover the complete system/ software lifecycle, from early security requirement elicitation to runtime configuration and monitoring, via high-level architecting, detailed design, development, integration and design-time testing. In this paper we illustrate the high-level scientific principles of the approach.}},
    language = {English},
    affiliation = {Department of Information Engineering and Computer Science - DISI , CASSIS - INRIA Lorraine - LORIA / LIFC , Dortmund University of Technology , The Foundation for Scientific and Industrial Research - SINTEF , Thales Research and Technologies [Orsay] - TRT , Department of Computer Science - K.U.Leuven , Thales Communications [Colombes] , Machine Intelligence and Imaging Research Group - ESAT},
    booktitle = {{4th European Conference, Towards a Service-Based Internet - ServiceWave 2011}},
    publisher = {Springer},
    pages = {134--143},
    address = {Poznan, Poland},
    volume = {6994},
    editor = {Witold Abramowicz and Ignacio M. Llorente and Mike Surridge and Andrea Zisman and Julien Vayssi{\`e}re },
    series = {Lecture Notes in Computer Science },
    audience = {international },
    doi = {10.1007/978-3-642-24755-2\_12 },
    year = {2011},
}

%F hal-00649258, version 1
%0 Conference Paper
%U http://hal.inria.fr/hal-00649258
%2 INFO:INFO_SE
%T Orchestrating Security and System Engineering for Evolving Systems
%A Massacci, Fabio
%A Bouquet, Fabrice
%A Fourneret, Elizabeta
%A Jurjens, Jan
%A Lund, Mass
%A Madelénat, Sébastien
%A Muehlberg, JanTobias
%A Paci, Federica
%A Paul, Stéphane
%A Piessens, Frank
%A Solhaug, Bjornar
%A Wenzel, Sven
%+ Department of Information Engineering and Computer Science - DISI , CASSIS - INRIA Lorraine - LORIA / LIFC , Dortmund University of Technology , The Foundation for Scientific and Industrial Research - SINTEF , Thales Research and Technologies [Orsay] - TRT , Department of Computer Science - K.U.Leuven , Thales Communications [Colombes] , Machine Intelligence and Imaging Research Group - ESAT
%X How to design a security engineering process that can cope with the dynamic evolution of Future Internet scenarios and the rigidity of existing system engineering processes? The SecureChange approach is to orchestrate (as opposed to integrate) security and system engineering concerns by two types of relations between engineering processes: (i) vertical relations between successive security-related processes; and (ii) horizontal relations between mainstream system engineering processes and concurrent security-related processes. This approach can be extended to cover the complete system/ software lifecycle, from early security requirement elicitation to runtime configuration and monitoring, via high-level architecting, detailed design, development, integration and design-time testing. In this paper we illustrate the high-level scientific principles of the approach.
%G English
%8 2011-00-00
%2 international
%B 4th European Conference, Towards a Service-Based Internet - ServiceWave 2011
%2 Poznan
%2 Poland
%8 2011-10-26
%8 2011-10-28
%E Witold Abramowicz and Ignacio M. Llorente and Mike Surridge and Andrea Zisman and Julien Vayssière
%I Springer
%2 Towards a Service-Based Internet
%V 6994
%N Lecture Notes in Computer Science
%P 134--143
%R 10.1007/978-3-642-24755-2_12
%2 http://www.springerlink.com/content/v07w3634ptpv8pm4/fulltext.pdf

<?xml version="1.0" encoding="UTF-8"?>
<listBibl xmlns="http://www.tei-c.org/ns/1.0" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:mml="http://www.w3.org/1998/Math/MathML">
<listBibl type="article"><head>Invited conferences</head>
<biblStruct type="article" xml:id="hal-00649258"><analytic>
<author><persName><forename>Fabio</forename><surname>Massacci</surname></persName>
<affiliation>
<orgName type="laboratory">DISI</orgName>
<orgName type="team">Department of Information Engineering and Computer Science</orgName>
<country>IT</country>
<orgName type="institution">University of Trento, Italy</orgName>
</affiliation>
</author>
<author><persName><forename>Fabrice</forename><surname>Bouquet</surname></persName>
<affiliation>
<orgName type="laboratory">INRIA Lorraine - LORIA / LIFC</orgName>
<orgName type="team">CASSIS</orgName>
<country>FR</country>
<orgName type="institution">INRIA</orgName>
<orgName type="institution">CNRS : FRE2661</orgName>
<orgName type="institution">Université de Franche-Comté</orgName>
<orgName type="institution">Université Henri Poincaré - Nancy I</orgName>
<orgName type="institution">Université Nancy II</orgName>
<orgName type="institution">Institut National Polytechnique de Lorraine (INPL)</orgName>
</affiliation>
</author>
<author><persName><forename>Elizabeta</forename><surname>Fourneret</surname></persName>
<affiliation>
<orgName type="laboratory">INRIA Lorraine - LORIA / LIFC</orgName>
<orgName type="team">CASSIS</orgName>
<country>FR</country>
<orgName type="institution">INRIA</orgName>
<orgName type="institution">CNRS : FRE2661</orgName>
<orgName type="institution">Université de Franche-Comté</orgName>
<orgName type="institution">Université Henri Poincaré - Nancy I</orgName>
<orgName type="institution">Université Nancy II</orgName>
<orgName type="institution">Institut National Polytechnique de Lorraine (INPL)</orgName>
</affiliation>
</author>
<author><persName><forename>Jan</forename><surname>Jurjens</surname></persName>
<affiliation>
<orgName type="team">Dortmund University of Technology</orgName>
<country>DE</country>
<orgName type="institution">Dortmund University of Technology</orgName>
</affiliation>
</author>
<author><persName><forename>Mass</forename><surname>Lund</surname></persName>
<affiliation>
<orgName type="laboratory">SINTEF</orgName>
<orgName type="team">The Foundation for Scientific and Industrial Research</orgName>
<country>NO</country>
<orgName type="institution">SINTEF</orgName>
</affiliation>
</author>
<author><persName><forename>Sébastien</forename><surname>Madelénat</surname></persName>
<affiliation>
<orgName type="laboratory">TRT</orgName>
<orgName type="team">Thales Research and Technologies [Orsay]</orgName>
<country>FR</country>
<orgName type="institution">THALES</orgName>
</affiliation>
</author>
<author><persName><forename>JanTobias</forename><surname>Muehlberg</surname></persName>
<affiliation>
<orgName type="team">Department of Computer Science - K.U.Leuven</orgName>
<country>BE</country>
<orgName type="institution">Katholieke Universiteit Leuven</orgName>
</affiliation>
</author>
<author><persName><forename>Federica</forename><surname>Paci</surname></persName>
<affiliation>
<orgName type="laboratory">DISI</orgName>
<orgName type="team">Department of Information Engineering and Computer Science</orgName>
<country>IT</country>
<orgName type="institution">University of Trento, Italy</orgName>
</affiliation>
</author>
<author><persName><forename>Stéphane</forename><surname>Paul</surname></persName>
<affiliation>
<orgName type="team">Thales Communications [Colombes]</orgName>
<country>FR</country>
<orgName type="institution">THALES</orgName>
</affiliation>
</author>
<author><persName><forename>Frank</forename><surname>Piessens</surname></persName>
<affiliation>
<orgName type="laboratory">ESAT</orgName>
<orgName type="team">Machine Intelligence and Imaging Research Group</orgName>
<country>BE</country>
<orgName type="institution">Université Catholique de Louvain (UCL) - Belgique</orgName>
<orgName type="institution">Katholieke Universiteit Leuven</orgName>
</affiliation>
</author>
<author><persName><forename>Bjornar</forename><surname>Solhaug</surname></persName>
<affiliation>
<orgName type="laboratory">SINTEF</orgName>
<orgName type="team">The Foundation for Scientific and Industrial Research</orgName>
<country>NO</country>
<orgName type="institution">SINTEF</orgName>
</affiliation>
</author>
<author><persName><forename>Sven</forename><surname>Wenzel</surname></persName>
<affiliation>
<orgName type="team">Dortmund University of Technology</orgName>
<country>DE</country>
<orgName type="institution">Dortmund University of Technology</orgName>
</affiliation>
</author>
<title type="main" level="a">Orchestrating Security and System Engineering for Evolving Systems</title></analytic><monogr><meeting>4th European Conference, Towards a Service-Based Internet - ServiceWave 2011</meeting><imprint><publisher>Springer</publisher><pubPlace><settlement>Poznan</settlement><country>Poland</country></pubPlace><biblScope type="publicationDate">2011-00-00</biblScope><biblScope type="vol">6994</biblScope><biblScope type="pp">134--143</biblScope></imprint></monogr><idno type="doi">10.1007/978-3-642-24755-2_12</idno><idno type="HALid">http://hal.inria.fr/hal-00649258</idno></biblStruct>
</listBibl>
</listBibl>