"This book provides a detailed account concerning information society and the challenges and application posed by its elicitation, specification, validation and management: from embedded software in cars to internet-based applications, COTS packages, health-care, and others"--Provided by publisher.

A novel, model-driven approach to security requirements engineering that focuses on socio-technical systems rather than merely technical systems. Security requirements engineering is especially challenging because designers must consider not just the software under design but also interactions among people, organizations, hardware, and software. Taking this broader perspective means designing a secure socio-technical system rather than a merely technical system. This book presents a novel, model-driven approach to designing secure socio-technical systems. It introduces the Socio-Technical Modeling Language (STS-ML) and presents a freely available software tool, STS-Tool, that supports this design approach through graphical modeling, automated reasoning capabilities to verify the models constructed, and the automatic derivation of security requirements documents. After an introduction to security requirements engineering and an overview of computer and information security, the book presents the STS-ML modeling language, introducing the modeling concepts used, explaining how to use STS-ML within the STS method for security requirements, and providing guidelines for the creation of models. The book then puts the STS approach into practice, introducing the STS-Tool and presenting two case studies from industry: an online collaborative platform and an e-Government system. Finally, the book considers other methods that can be used in conjunction with the STS method or that constitute an alternative to it. The book is suitable for course use or as a reference for practitioners. Exercises, review questions, and problems appear at the end of each chapter.

This State-of-the-Art Survey contains a selection of papers representing state-of-the-art results in the engineering of secure software-based Future Internet services and systems, produced by the NESSoS project researchers. The engineering approach of the Network of Excellence NESSoS, funded by the European Commission, is based on the principle of addressing security concerns from the very beginning in all software development phases, thus contributing to reduce the amount of software vulnerabilities and enabling the systematic treatment of security needs through the engineering process. The 15 papers included in this volume deal with the main NESSoS research areas: security requirements for Future Internet services; creating secure service architectures and secure service design; supporting programming environments for secure and composable services; enabling security assurance and integrating former results in a risk-aware and cost-aware software life-cycle.

Addresses current issues of research into socio-technical systems (STSs). Provides suggestions on how social knowledge can synergize with technical knowledge.

An overview of engineering systems that describes the new challenges posed for twenty-first-century engineers by today's highly complex sociotechnical systems. Engineering, for much of the twentieth century, was mainly about artifacts and inventions. Now, it's increasingly about complex systems. As the airplane taxis to the gate, you access the Internet and check email with your PDA, linking the communication and transportation systems. At home, you recharge your plug-in hybrid vehicle, linking transportation to the electricity grid. Today's large-scale, highly complex sociotechnical systems converge, interact, and depend on each other in ways engineers of old could barely have imagined. As scale, scope, and complexity increase, engineers consider technical and social issues together in a highly integrated way as they design flexible, adaptable, robust systems that can be easily modified and reconfigured to satisfy changing requirements and new technological opportunities. Engineering Systems offers a comprehensive examination of such systems and the associated emerging field of study. Through scholarly discussion, concrete examples, and history, the authors consider the engineer's changing role, new ways to model and analyze these systems, the impacts on engineering education, and the future challenges of meeting human needs through the technologically enabled systems of today and tomorrow.

The book is divided into two parts. Part 1 examines issues in current requirements engineering methods and practice. Part 2 details the way in which a particular orientation on the social aspect of the area can increase our understanding of the requirements process and also inform current requirements practice.

"This book provides a detailed account concerning information society and the challenges and application posed by its elicitation, specification, validation and management: from embedded software in cars to internet-based applications, COTS packages, health-care, and others"--Provided by publisher.