Security requirements elicitation: A smart health case

Autor: Anass Rabii, Ounsa Roudies, Saliha Assoul
Rok vydání: 2020
Předmět:
Zdroj: 2020 Fourth World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4).
DOI: 10.1109/worlds450073.2020.9210330
Popis: With the high increase in digitalization, we progress towards smart cities. With their high reliability on technology and information, the number of vulnerabilities increase. Moreover, with the amount of critical information systems process, it becomes vital that these vulnerabilities are addressed. With the heterogeneous nature and complexity of smart city systems, it becomes more difficult to insure security by design. In addition to security vulnerabilities, smart cities must satisfy the security requirements enforced by governmental entities as well as the standards relating to each domain. This research addresses the challenge of securing smart city systems throughout the entire engineering cycle. Onthe basis of security concepts extracted from ISO security standards, ISO 21827 and ISO 27000, we elaborated an approach designed to support security management. We used the ISO security concepts to extend SysML diagrams and provided a step by step guide to implementing the security engineering process. We then applied our approach to a Smart hospital system detailing each step for the Health Information System (HIS) case and providing extended SysML diagrams. We then position our research amongst other smartcity related or SysML related research.
Databáze: OpenAIRE