{"id":"https://openalex.org/W7225334635","doi":"https://doi.org/10.5281/zenodo.23990922","title":"Relating Security Capabilities to Goal-Oriented Requirements Models in KAOS","display_name":"Relating Security Capabilities to Goal-Oriented Requirements Models in KAOS","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225334635","doi":"https://doi.org/10.5281/zenodo.23990922"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23990922","doi":"https://doi.org/10.5281/zenodo.23990922","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23990922","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.23990922","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160986079","display_name":"PUSKAR TIMALSINA","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405258702","display_name":"Melbourne Institute of Technology","ror":"https://ror.org/0132xxe06","country_code":"AU","type":"education","lineage":["https://openalex.org/I4405258702"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"TIMALSINA, PUSKAR","raw_affiliation_strings":["Melbourne Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Melbourne Institute of Technology","institution_ids":["https://openalex.org/I4405258702"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069923402","display_name":"Ahmad Alelaimat","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405258702","display_name":"Melbourne Institute of Technology","ror":"https://ror.org/0132xxe06","country_code":"AU","type":"education","lineage":["https://openalex.org/I4405258702"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alelaimat, Ahmad","raw_affiliation_strings":["Melbourne Institute of Technology"],"raw_orcid":"https://orcid.org/0000-0003-2596-8221","affiliations":[{"raw_affiliation_string":"Melbourne Institute of Technology","institution_ids":["https://openalex.org/I4405258702"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4405258702"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.8105000257492065,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.8105000257492065,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.040300000458955765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11450","display_name":"Model-Driven Software Engineering Techniques","score":0.030700000002980232,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-capabilities","display_name":"security capabilities","score":0.9340000152587891},{"id":"https://openalex.org/keywords/kaos","display_name":"KAOS","score":0.9549999833106995},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.6980000138282776},{"id":"https://openalex.org/keywords/smart-campus","display_name":"smart campus","score":0.8539999723434448},{"id":"https://openalex.org/keywords/traceability","display_name":"traceability","score":0.7900000214576721},{"id":"https://openalex.org/keywords/gap-analysis","display_name":"gap analysis","score":0.7480000257492065},{"id":"https://openalex.org/keywords/goal-satisfaction","display_name":"goal satisfaction","score":0.7250000238418579},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"requirements engineering","score":0.5320000052452087}],"concepts":[{"id":"https://openalex.org/C9586889","wikidata":"https://www.wikidata.org/wiki/Q5575167","display_name":"Goal modeling","level":4,"score":0.6657999753952026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6401000022888184},{"id":"https://openalex.org/C153876917","wikidata":"https://www.wikidata.org/wiki/Q899704","display_name":"Traceability","level":2,"score":0.5647000074386597},{"id":"https://openalex.org/C86610423","wikidata":"https://www.wikidata.org/wiki/Q1925081","display_name":"Metamodeling","level":2,"score":0.46380001306533813},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.436599999666214},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.4205999970436096},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.396699994802475},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.375900000333786},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.3718000054359436},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.36820000410079956},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.34060001373291016},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.33899998664855957},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3375000059604645},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3301999866962433},{"id":"https://openalex.org/C173577280","wikidata":"https://www.wikidata.org/wiki/Q530038","display_name":"Requirements management","level":4,"score":0.3206999897956848},{"id":"https://openalex.org/C123247970","wikidata":"https://www.wikidata.org/wiki/Q5001932","display_name":"Business requirements","level":4,"score":0.31630000472068787},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3059999942779541},{"id":"https://openalex.org/C199747065","wikidata":"https://www.wikidata.org/wiki/Q3254666","display_name":"Non-functional requirement","level":5,"score":0.30469998717308044},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C84653758","wikidata":"https://www.wikidata.org/wiki/Q5575175","display_name":"Goal orientation","level":2,"score":0.29739999771118164},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27469998598098755},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.27320000529289246},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.27090001106262207},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C35084680","wikidata":"https://www.wikidata.org/wiki/Q848201","display_name":"Requirements traceability","level":5,"score":0.2524999976158142}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23990922","doi":"https://doi.org/10.5281/zenodo.23990922","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23990922","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},{"id":"doi:10.5281/zenodo.23990923","doi":"https://doi.org/10.5281/zenodo.23990923","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23990923","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23990922","doi":"https://doi.org/10.5281/zenodo.23990922","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23990922","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2380132991","https://openalex.org/W2091604821","https://openalex.org/W4248126779","https://openalex.org/W3211654378","https://openalex.org/W4207011060","https://openalex.org/W2288170729","https://openalex.org/W2800675260","https://openalex.org/W6959763348","https://openalex.org/W7100532972","https://openalex.org/W2358436947"],"abstract_inverted_index":{"Baselines":[0],"such":[1],"as":[2],"NIST":[3],"IR":[4],"8259A":[5],"list":[6],"what":[7,17],"an":[8,18,154],"IoT":[9],"device":[10,30],"can":[11,31,183,194],"do.":[12],"Goal-oriented":[13],"requirements":[14,152,199],"models":[15,58],"state":[16],"organisation":[19],"needs":[20],"to":[21,41,56,121],"hold.":[22],"The":[23],"two":[24,178],"are":[25],"rarely":[26],"connected,":[27],"so":[28],"a":[29,48,71,74,85,108,127,147,158,168,191],"tick":[32],"every":[33],"capability":[34,72,90,122,128,192],"while":[35],"the":[36,80,89,124,198],"goal":[37,57,75,81,145],"it":[38],"was":[39],"bought":[40],"support":[42],"still":[43],"fails.":[44],"We":[45,94,105],"propose":[46],"GoalCap,":[47],"conceptual":[49],"modelling":[50],"approach":[51],"that":[52,70,110,129,137,177,190,197],"relates":[53],"security":[54,135],"capabilities":[55,182],"in":[59],"KAOS,":[60],"developed":[61],"for":[62,102],"IoT-enabled":[63],"smart":[64,170],"campuses.":[65],"Its":[66],"central":[67],"idea":[68],"is":[69,130],"enables":[73],"rather":[76],"than":[77],"satisfying":[78],"it:":[79],"holds":[82],"only":[83],"when":[84],"responsible":[86],"agent":[87],"exercises":[88],"under":[91],"stated":[92],"conditions.":[93],"compare":[95],"four":[96],"goal-oriented":[97],"approaches":[98],"and":[99,119,153,157,189],"justify":[100],"KAOS":[101],"this":[103],"purpose.":[104],"then":[106],"contribute":[107],"metamodel":[109],"extends":[111],"traceability":[112],"from":[113],"stakeholder":[114],"goals":[115,196],"through":[116],"requirements,":[117,175],"obstacles":[118],"anti-goals":[120],"elements;":[123],"notion":[125],"of":[126,144,161,167,187],"absent,":[131],"latent":[132],"or":[133,141],"exercised;":[134],"scenarios":[136],"yield":[138],"strong,":[139],"weak":[140],"unsatisfied":[142],"levels":[143,186],"satisfaction;":[146],"two-way":[148],"gap":[149],"analysis":[150],"between":[151],"external":[155],"baseline;":[156],"campus-level":[159],"view":[160],"heterogeneous":[162],"devices.":[163],"A":[164],"running":[165],"example":[166],"composite":[169],"campus,":[171],"with":[172,180],"fifteen":[173],"literature-derived":[174],"shows":[176],"devices":[179],"identical":[181],"reach":[184],"different":[185],"satisfaction,":[188],"baseline":[193],"expose":[195],"had":[200],"missed.":[201]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-06T00:00:00"}