Model-based privacy and security analysis with CARiSMA

Amir Shayan Ahmadian; Sven Matthias Peldszus; Qusai Ramadan; Jan Jürjens

doi:10.1145/3106237.3122823

Model-based privacy and security analysis with CARiSMA

Amir Shayan Ahmadian
, Sven Matthias Peldszus
, Qusai Ramadan
, Jan Jürjens

University of Koblenz

Research output: Conference Article in Proceeding or Book/Report chapter › Article in proceedings › Research › peer-review

Abstract

We present CARiSMA, a tool that is originally designed to support model-based security analysis of IT systems. In our recent work, we added several new functionalities to CARiSMA to support the privacy of personal data. Moreover, we introduced a mechanism to assist the system designers to perform a CARiSMA analysis by automatically initializing an appropriate CARiSMA analysis concerning security and privacy requirements. The motivation for our work is Article 25 of Regulation (EU) 2016/679, which requires appropriate technical and organizational controls must be implemented for ensuring that, by default, the processing of personal data complies with the principles on processing of personal data. This implies that initially IT systems must be analyzed to verify if such principles are respected. System models allow the system developers to handle the complexity of systems and to focus on key aspects such as privacy and security. CARiSMA is available at http://carisma.umlsec.de and our screen cast at https://youtu.be/b5zeHig3ARw.

Original language	English
Title of host publication	Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2017
Number of pages	5
Publisher	Association for Computing Machinery
Publication date	2017
Pages	989–993
ISBN (Print)	9781450351058
DOIs	https://doi.org/10.1145/3106237.3122823
Publication status	Published - 2017
Externally published	Yes
Event	Joint Meeting on Foundations of Software Engineering - Paderborn, Germany Duration: 4 Sept 2017 → 8 Sept 2017 Conference number: 11 https://dblp.org/rec/conf/sigsoft/2017.html

Conference

Conference	Joint Meeting on Foundations of Software Engineering
Number	11
Country/Territory	Germany
City	Paderborn
Period	04/09/2017 → 08/09/2017
Internet address	https://dblp.org/rec/conf/sigsoft/2017.html

Keywords

System design analysis
Model-based analysis
Privacy
Security

Access to Document

10.1145/3106237.3122823

Cite this

@inproceedings{f6d1d3e16dbe4f42bdba60c43b4a5c01,

title = "Model-based privacy and security analysis with CARiSMA",

abstract = "We present CARiSMA, a tool that is originally designed to support model-based security analysis of IT systems. In our recent work, we added several new functionalities to CARiSMA to support the privacy of personal data. Moreover, we introduced a mechanism to assist the system designers to perform a CARiSMA analysis by automatically initializing an appropriate CARiSMA analysis concerning security and privacy requirements. The motivation for our work is Article 25 of Regulation (EU) 2016/679, which requires appropriate technical and organizational controls must be implemented for ensuring that, by default, the processing of personal data complies with the principles on processing of personal data. This implies that initially IT systems must be analyzed to verify if such principles are respected. System models allow the system developers to handle the complexity of systems and to focus on key aspects such as privacy and security. CARiSMA is available at http://carisma.umlsec.de and our screen cast at https://youtu.be/b5zeHig3ARw.",

keywords = "System design analysis, Model-based analysis, Privacy, Security",

author = "Ahmadian, \{Amir Shayan\} and Peldszus, \{Sven Matthias\} and Qusai Ramadan and Jan J{\"u}rjens",

year = "2017",

doi = "10.1145/3106237.3122823",

language = "English",

isbn = "9781450351058",

pages = "989–993",

booktitle = "Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2017",

publisher = "Association for Computing Machinery",

address = "United States",

note = "Joint Meeting on Foundations of Software Engineering, FSE ; Conference date: 04-09-2017 Through 08-09-2017",

url = "https://dblp.org/rec/conf/sigsoft/2017.html",

}

Ahmadian, AS, Peldszus, SM, Ramadan, Q & Jürjens, J 2017, Model-based privacy and security analysis with CARiSMA. in Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2017. Association for Computing Machinery, pp. 989–993, Joint Meeting on Foundations of Software Engineering, Paderborn, North Rhine-Westphalia, Germany, 04/09/2017. https://doi.org/10.1145/3106237.3122823

Model-based privacy and security analysis with CARiSMA. / Ahmadian, Amir Shayan; Peldszus, Sven Matthias; Ramadan, Qusai et al.
Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2017. Association for Computing Machinery, 2017. p. 989–993.

Research output: Conference Article in Proceeding or Book/Report chapter › Article in proceedings › Research › peer-review

TY - GEN

T1 - Model-based privacy and security analysis with CARiSMA

AU - Ahmadian, Amir Shayan

AU - Peldszus, Sven Matthias

AU - Ramadan, Qusai

AU - Jürjens, Jan

N1 - Conference code: 11

PY - 2017

Y1 - 2017

N2 - We present CARiSMA, a tool that is originally designed to support model-based security analysis of IT systems. In our recent work, we added several new functionalities to CARiSMA to support the privacy of personal data. Moreover, we introduced a mechanism to assist the system designers to perform a CARiSMA analysis by automatically initializing an appropriate CARiSMA analysis concerning security and privacy requirements. The motivation for our work is Article 25 of Regulation (EU) 2016/679, which requires appropriate technical and organizational controls must be implemented for ensuring that, by default, the processing of personal data complies with the principles on processing of personal data. This implies that initially IT systems must be analyzed to verify if such principles are respected. System models allow the system developers to handle the complexity of systems and to focus on key aspects such as privacy and security. CARiSMA is available at http://carisma.umlsec.de and our screen cast at https://youtu.be/b5zeHig3ARw.

AB - We present CARiSMA, a tool that is originally designed to support model-based security analysis of IT systems. In our recent work, we added several new functionalities to CARiSMA to support the privacy of personal data. Moreover, we introduced a mechanism to assist the system designers to perform a CARiSMA analysis by automatically initializing an appropriate CARiSMA analysis concerning security and privacy requirements. The motivation for our work is Article 25 of Regulation (EU) 2016/679, which requires appropriate technical and organizational controls must be implemented for ensuring that, by default, the processing of personal data complies with the principles on processing of personal data. This implies that initially IT systems must be analyzed to verify if such principles are respected. System models allow the system developers to handle the complexity of systems and to focus on key aspects such as privacy and security. CARiSMA is available at http://carisma.umlsec.de and our screen cast at https://youtu.be/b5zeHig3ARw.

KW - System design analysis

KW - Model-based analysis

KW - Privacy

KW - Security

UR - http://dx.doi.org/10.1145/3106237.3122823

U2 - 10.1145/3106237.3122823

DO - 10.1145/3106237.3122823

M3 - Article in proceedings

SN - 9781450351058

SP - 989

EP - 993

BT - Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering - ESEC/FSE 2017

PB - Association for Computing Machinery

T2 - Joint Meeting on Foundations of Software Engineering

Y2 - 4 September 2017 through 8 September 2017

ER -

Model-based privacy and security analysis with CARiSMA

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this