| Abstract |
|
Security assessments are costly and time consuming and cannot be carried out from scratch each time a system is updated or modified. This motivates the need for specific methodology addressing the maintenance of assessment results, in particular, and a component-oriented approach to security assessment in general. This paper presents such a methodology in the setting of model-based security assessment as developed bu the EU-project CORAS. The main focus is on the maintenance part.
|
Additional Information
|
Citation:
Mass Soldal Lund, Folker den Braber, Ketil Stolen,
"Maintaining Results from Security Assessments,"
csmr,
p. 341,
Seventh European Conference on Software Maintenance and Reengineering (CSMR'03),
2003
|