@inproceedings{88e22dcb9f9f4adb8a756c16d91ed560,
title = "Discovering and understanding multi-dimensional correlations among certification requirements with application to risk assessment",
abstract = "In this paper we outline our approach to discover and understand multi-dimensional correlations among regulatory security certification requirements in the context of a complex software system. A thorough understanding of these correlations is necessary to assure that diverse constraints imposed by numerous certification requirements are adequate for collectively contributing to emergent security properties in a highly interconnected socio-technical environment. We elaborate on methodological support to discover an exhaustive set of applicable certification requirements in a given operational scenario of the target software system. We then describe techniques to systematically understand the multi-dimensional correlations among these requirements with application to security risk assessment. The case study of applying our approach to a regulatory certification process of The United States Department of Defense (DoD) is presented.",
author = "Gandhi, {Robin A.} and Lee, {Seok Won}",
year = "2007",
doi = "10.1109/RE.2007.21",
language = "English (US)",
isbn = "0769529356",
series = "Proceedings - 15th IEEE International Requirements Engineering Conference, RE 2007",
pages = "231--240",
booktitle = "Proceedings - 15th IEEE International Requirements Engineering Conference, RE 2007",
note = "15th IEEE International Requirements Engineering Conference, RE 2007 ; Conference date: 15-10-2007 Through 19-10-2007",
}