{"id":"https://openalex.org/W2169268740","doi":"https://doi.org/10.1109/re.2011.6051665","title":"Eliciting usable security requirements with misusability cases","display_name":"Eliciting usable security requirements with misusability cases","publication_year":2011,"publication_date":"2011-08-01","ids":{"openalex":"https://openalex.org/W2169268740","doi":"https://doi.org/10.1109/re.2011.6051665","mag":"2169268740"},"language":"en","primary_location":{"id":"doi:10.1109/re.2011.6051665","is_oa":false,"landing_page_url":"https://doi.org/10.1109/re.2011.6051665","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE 19th International Requirements Engineering Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://rgu-repository.worktribe.com/output/1427849","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045597082","display_name":"Shamal Faily","orcid":"https://orcid.org/0000-0002-2859-1143"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Shamal Faily","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061337880","display_name":"Ivan Fl\u00e9chais","orcid":"https://orcid.org/0000-0002-3620-0843"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ivan Flechais","raw_affiliation_strings":["Department of Computer Science, University of Oxford, Oxford, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I40120149"],"apc_list":null,"apc_paid":null,"fwci":0.7107,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.71602777,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"339","last_page":"340"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.897792398929596},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7618441581726074},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.6630815863609314},{"id":"https://openalex.org/keywords/usability-goals","display_name":"Usability goals","score":0.6200452446937561},{"id":"https://openalex.org/keywords/usability-engineering","display_name":"Usability engineering","score":0.5446254014968872},{"id":"https://openalex.org/keywords/web-usability","display_name":"Web usability","score":0.5196517705917358},{"id":"https://openalex.org/keywords/pluralistic-walkthrough","display_name":"Pluralistic walkthrough","score":0.5097469687461853},{"id":"https://openalex.org/keywords/usability-inspection","display_name":"Usability inspection","score":0.5027527809143066},{"id":"https://openalex.org/keywords/human-computer-interaction-in-information-security","display_name":"Human-computer interaction in information security","score":0.4848431348800659},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.47499099373817444},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.4686075448989868},{"id":"https://openalex.org/keywords/heuristic-evaluation","display_name":"Heuristic evaluation","score":0.46628567576408386},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40239372849464417},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.33793139457702637},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.19313549995422363},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.18858608603477478},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.1375735104084015},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.11549186706542969}],"concepts":[{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.897792398929596},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7618441581726074},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.6630815863609314},{"id":"https://openalex.org/C62993174","wikidata":"https://www.wikidata.org/wiki/Q2928808","display_name":"Usability goals","level":4,"score":0.6200452446937561},{"id":"https://openalex.org/C100302975","wikidata":"https://www.wikidata.org/wiki/Q1642623","display_name":"Usability engineering","level":3,"score":0.5446254014968872},{"id":"https://openalex.org/C4237393","wikidata":"https://www.wikidata.org/wiki/Q1636686","display_name":"Web usability","level":3,"score":0.5196517705917358},{"id":"https://openalex.org/C188688815","wikidata":"https://www.wikidata.org/wiki/Q7205541","display_name":"Pluralistic walkthrough","level":3,"score":0.5097469687461853},{"id":"https://openalex.org/C23456302","wikidata":"https://www.wikidata.org/wiki/Q7901668","display_name":"Usability inspection","level":4,"score":0.5027527809143066},{"id":"https://openalex.org/C6353995","wikidata":"https://www.wikidata.org/wiki/Q17027910","display_name":"Human-computer interaction in information security","level":5,"score":0.4848431348800659},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.47499099373817444},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.4686075448989868},{"id":"https://openalex.org/C3255780","wikidata":"https://www.wikidata.org/wiki/Q1616517","display_name":"Heuristic evaluation","level":3,"score":0.46628567576408386},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40239372849464417},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.33793139457702637},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19313549995422363},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.18858608603477478},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.1375735104084015},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.11549186706542969},{"id":"https://openalex.org/C126322002","wikidata":"https://www.wikidata.org/wiki/Q11180","display_name":"Internal medicine","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/re.2011.6051665","is_oa":false,"landing_page_url":"https://doi.org/10.1109/re.2011.6051665","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE 19th International Requirements Engineering Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.701.7005","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.701.7005","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.shamalfaily.com/wp-content/papercite-data/pdf/fafl112.pdf","raw_type":"text"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:cb9f8960-8704-488a-bde5-915f58ad0736","is_oa":false,"landing_page_url":"https://ora.ox.ac.uk/objects/uuid:cb9f8960-8704-488a-bde5-915f58ad0736","pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Department of Computer Science","raw_type":"Conference item"},{"id":"pmh:oai:rgu-repository.worktribe.com:1427849","is_oa":true,"landing_page_url":"https://rgu-repository.worktribe.com/output/1427849","pdf_url":null,"source":{"id":"https://openalex.org/S4306400814","display_name":"Open Access Institutional Repository at Robert Gordon University (Robert Gordon University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I522815984","host_organization_name":"Robert Gordon University","host_organization_lineage":["https://openalex.org/I522815984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Presentation / Conference Contribution"}],"best_oa_location":{"id":"pmh:oai:rgu-repository.worktribe.com:1427849","is_oa":true,"landing_page_url":"https://rgu-repository.worktribe.com/output/1427849","pdf_url":null,"source":{"id":"https://openalex.org/S4306400814","display_name":"Open Access Institutional Repository at Robert Gordon University (Robert Gordon University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I522815984","host_organization_name":"Robert Gordon University","host_organization_lineage":["https://openalex.org/I522815984"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Presentation / Conference Contribution"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7799999713897705}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1537884690","https://openalex.org/W1543262385","https://openalex.org/W1592821266","https://openalex.org/W1997210479","https://openalex.org/W2017538178","https://openalex.org/W2080019998","https://openalex.org/W2103224454","https://openalex.org/W2129289644","https://openalex.org/W2146571486","https://openalex.org/W2147391500","https://openalex.org/W3161918289"],"related_works":["https://openalex.org/W2016022053","https://openalex.org/W2155602934","https://openalex.org/W2212131490","https://openalex.org/W2081936878","https://openalex.org/W2120843845","https://openalex.org/W2163058110","https://openalex.org/W2017322369","https://openalex.org/W4225834985","https://openalex.org/W2016157817","https://openalex.org/W1982373744"],"abstract_inverted_index":{"Although":[0],"widely":[1],"used":[2,10],"for":[3],"both":[4],"security":[5,12,31],"and":[6,22,32,81,88],"usability":[7,33,66],"concerns,":[8],"scenarios":[9,28,57],"in":[11,95],"design":[13,19,38,61],"may":[14,63],"not":[15],"necessarily":[16],"inform":[17],"the":[18,75],"of":[20,26],"usability,":[21],"vice-versa.":[23],"One":[24],"way":[25],"using":[27],"to":[29,42,47,65,70,79,85],"bridge":[30],"involves":[34],"explicitly":[35],"describing":[36],"how":[37,60],"decisions":[39,62],"can":[40],"lead":[41,64],"users":[43],"inadvertently":[44],"exploiting":[45],"vulnerabilities":[46],"carry":[48],"out":[49,78],"their":[50],"production":[51],"tasks.":[52],"We":[53,73],"present":[54],"Mis-usability":[55],"Cases:":[56],"which":[58],"describe":[59,74],"problems":[67],"subsequently":[68],"leading":[69],"system":[71],"misuse.":[72],"steps":[76],"carried":[77],"develop":[80],"apply":[82],"misusability":[83],"cases":[84],"elicit":[86],"requirements":[87],"report":[89],"preliminary":[90],"results":[91],"applying":[92],"this":[93],"technique":[94],"a":[96],"recent":[97],"case":[98],"study.":[99]},"counts_by_year":[{"year":2017,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}