Designing Usable and Secure Software with IRIS and CAIRIS

✍ Scribed by Shamal Faily

• Publisher: Springer
• Year: 2018
• Tongue: English
• Leaves: 258
• Category: Library

✦ Synopsis

Everyone expects the products and services they use to be secure, but 'building security in' at the earliest stages of a system's design also means designing for use as well. Software that is unusable to end-users and unwieldy to developers and administrators may be insecure as errors and violations may expose exploitable vulnerabilities.

This book shows how practitioners and researchers can build both security and usability into the design of systems. It introduces the IRIS framework and the open source CAIRIS platform that can guide the specification of secure and usable software. It also illustrates how IRIS and CAIRIS can complement techniques from User Experience, Security Engineering and Innovation & Entrepreneurship in ways that allow security to be addressed at different stages of the software lifecycle without disruption.

Real-world examples are provided of the techniques and processes illustrated in this book, making this text a resource for practitioners, researchers, educators, and students.

✦ Table of Contents

Front Matter

Foundations
Front Matter
Why Designing for Usability and Security is Hard
Usable and Secure Software Design: The State-of-the-Art
A Conceptual Model for Usable Secure Requirements Engineering

IRIS and CAIRIS
The IRIS Framework
Introducing CAIRIS: Tool-Support for Designing Usable and Secure Systems
Adapting Personas and Scenarios for Security and Usability Design
Case Study: Securing a Medical Data Portal
Case Study: Defending Critical Infrastructure Against Stuxnet

Beyond Requirements
Front Matter
Analysing and Managing Architectural Risk
Case Study: Securing An Internet of Things Middleware
Evaluate Security as an Innovation
Further Applications of CAIRIS for Usable and Secure Software
Back Matter

✦ Subjects

security, usability, requirements, IRIS, CAIRIS, software design