Designing Usable and Secure Software with IRIS and CAIRIS

Description

Everyone expects the products and services they use to be secure, but 'building security in' at the earliest stages of a system's design also means designing for use as well. Software that is unusable to end-users and unwieldy to developers and administrators may be insecure as errors and violations may expose exploitable vulnerabilities. This book shows how practitioners and researchers can build both security and usability into the design of systems. It introduces the IRIS framework and the open source CAIRIS platform that can guide the specification of secure and usable software. It also illustrates how IRIS and CAIRIS can complement techniques from User Experience, Security Engineering and Innovation & Entrepreneurship in ways that allow security to be addressed at different stages of the software lifecycle without disruption. Real-world examples are provided of the techniques and processes illustrated in this book, making this text a resource for practitioners, researchers, educators, and students. Front Matter Foundations Front Matter Why Designing for Usability and Security is Hard Usable and Secure Software Design: The State-of-the-Art A Conceptual Model for Usable Secure Requirements Engineering IRIS and CAIRIS The IRIS Framework Introducing CAIRIS: Tool-Support for Designing Usable and Secure Systems Adapting Personas and Scenarios for Security and Usability Design Case Study: Securing a Medical Data Portal Case Study: Defending Critical Infrastructure Against Stuxnet Beyond Requirements Front Matter Analysing and Managing Architectural Risk Case Study: Securing An Internet of Things Middleware Evaluate Security as an Innovation Further Applications of CAIRIS for Usable and Secure Software Back Matter