Reference Hub

This research has been cited in:

Article
Advanced trust negotiations in critical infrastructuresInternational Journal of Critical Infrastructures10.1504/IJCIS.2010.033338
Chapter
A Service-Oriented Approach for Assessing Infrastructure SecurityCritical Infrastructure Protection10.1007/978-0-387-75462-8_26
Article
An Ontology for Privacy Requirements via a Systematic Literature ReviewJournal on Data Semantics10.1007/s13740-020-00116-5
Conference
Risk assessment of a cardiology eHealth service in HYGEIAnetComputers in Cardiology, 200310.1109/CIC.2003.1291125
Conference
Security Risk Management by Qualitative Vulnerability Analysis2011 Third International Workshop on Security Measurements and Metrics10.1109/Metrisec.2011.12
Conference
Critical services in the cloud: Understanding security and resilience risks2014 6th International Workshop on Reliable Networks Design and Modeling (RNDM)10.1109/RNDM.2014.7014942
Chapter
Modeling Social and Individual Trust in Requirements Engineering MethodologiesTrust Management10.1007/11429760_12
Chapter
Towards an Ontology for Privacy Requirements via a Systematic Literature ReviewConceptual Modeling10.1007/978-3-319-69904-2_16
Conference
Structured system threat modeling and mitigation analysis for industrial automation systems2015 IEEE 13th International Conference on Industrial Informatics (INDIN)10.1109/INDIN.2015.7281734
Article
Computer-aided Support for Secure TroposAutomated Software Engineering10.1007/s10515-007-0013-5
Article
MEDICALHARM: A threat modeling designed for modern medical devices and a comprehensive study on effectiveness, user satisfaction, and security perspectivesInternational Journal of Information Security10.1007/s10207-024-00826-y
Conference
MEDICALHARM - A Threat Modeling designed for Modern Medical Devices2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)10.1109/TrustCom60117.2023.00157
Conference
Supporting Security Engineering at Design Time with Adequate Tooling2012 IEEE 15th International Conference on Computational Science and Engineering10.1109/ICCSE.2012.34
Article
Applying Security Design Analysis to a service‐based systemSoftware: Practice and Experience10.1002/spe.693
Article
A novel application of the CORAS framework for ensuring cyber hygiene on shipboard RADARJournal of Marine Engineering & Technology10.1080/20464177.2023.2292782
Conference
Towards Security Modeling of e-Voting Systems2016 IEEE 24th International Requirements Engineering Conference Workshops (REW)10.1109/REW.2016.037
Article
A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilitiesRequirements Engineering10.1007/s00766-009-0090-z
Chapter
An Approach for Model-Based Risk AssessmentComputer Safety, Reliability, and Security10.1007/978-3-540-30138-7_26
Conference
Responsibility modeling for identifying sociotechnical threats to the dependability of coalitions of systems2011 6th International Conference on System of Systems Engineering10.1109/SYSOSE.2011.5966593
Conference
Towards more secure systemsProceedings of the 4th international conference on Security and privacy in communication netowrks10.1145/1460877.1460923
Conference
Emergent Disservices in Interdependent Systems and System-of-Systems2006 IEEE International Conference on Systems, Man and Cybernetics10.1109/ICSMC.2006.384449
Article
Goal-driven risk assessment in requirements engineeringRequirements Engineering10.1007/s00766-010-0112-x
Chapter
A Modeling Ontology for Integrating Vulnerabilities into Security Requirements Conceptual FoundationsConceptual Modeling - ER 200910.1007/978-3-642-04840-1_10
Conference
Maintaining results from security assessmentsSeventh European Conference onSoftware Maintenance and Reengineering, 2003. Proceedings.10.1109/CSMR.2003.1192442
Conference
InSAW-Industrial Security Assessment Workbench2008 First International Conference on Infrastructure Systems and Services: Building Networks for a Brighter Future (INFRA)10.1109/INFRA.2008.5439659
Conference
Requirements Elicitation and Derivation of Security Policy Templates—An Industrial Case Study2016 IEEE 24th International Requirements Engineering Conference (RE)10.1109/RE.2016.22
Chapter
A Semantic Paradigm for Component-Based Specification Integrating a Notion of Security RiskFormal Aspects in Security and Trust10.1007/978-3-540-75227-1_3
Chapter
A Goal-Based Modeling Approach to Develop Requirements of an Adaptive System with Environmental UncertaintyModel Driven Engineering Languages and Systems10.1007/978-3-642-04425-0_36
Chapter
A Unified Use-Misuse Case Model for Capturing and Analysing Safety and Security RequirementsPrivacy Solutions and Security Frameworks in Information Protection10.4018/978-1-4666-2050-6.ch014
Article
A Unified Use-Misuse Case Model for Capturing and Analysing Safety and Security RequirementsInternational Journal of Information Security and Privacy10.4018/jisp.2011100102

The CORAS Methodology: Model-based Risk Assessment Using UML and UP

Folker den Braber, Theo Dimitrakos, Bjorn A. Gran, Mass S. Lund, Ketil Stolen, Jan O. Aagedal

Source Title: UML and the Unified Process

ISBN13: 9781931777445|ISBN10: 1931777446|EISBN13: 9781931777605

DOI: 10.4018/978-1-93177-744-5.ch017

Cite Chapter Cite Chapter

MLA

den Braber, Folker, et al. "The CORAS Methodology: Model-based Risk Assessment Using UML and UP." UML and the Unified Process, edited by Liliana Favre, IGI Global, 2003, pp. 332-357. https://doi.org/10.4018/978-1-93177-744-5.ch017

APA

den Braber, F., Dimitrakos, T., Gran, B. A., Lund, M. S., Stolen, K., & Aagedal, J. O. (2003). The CORAS Methodology: Model-based Risk Assessment Using UML and UP. In L. Favre (Ed.), UML and the Unified Process (pp. 332-357). IGI Global. https://doi.org/10.4018/978-1-93177-744-5.ch017

Chicago

den Braber, Folker, et al. "The CORAS Methodology: Model-based Risk Assessment Using UML and UP." In UML and the Unified Process, edited by Liliana Favre, 332-357. Hershey, PA: IGI Global, 2003. https://doi.org/10.4018/978-1-93177-744-5.ch017

Export Reference

Favorite

View Full Text PDF

Abstract

This chapter introduces the CORAS methodology in which Unified Modeling Language (UML) and Unified Process (UP) are combined to support a model-based risk assessment on security-critical systems. The hypothesis is that modeling techniques like UML contribute to increased understanding for the different stakeholders involved during a risk assessment. In the CORAS methodology, a traditional risk management process is integrated with UP, which is a well-accepted system development process. CORAS tries to show how UML can contribute to better understanding, documentation, and communicating during the different phases of the risk management process. CORAS addresses both systems under development and systems already in use.

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.

Username or email: *

Password: *

Forgot individual login password?

Create individual account

The CORAS Methodology: Model-based Risk Assessment Using UML and UP

MLA

APA

Chicago

Export Reference

Abstract

Request Access