{"id":"https://openalex.org/W2974419579","doi":"https://doi.org/10.1109/syscon.2019.8836929","title":"A Top Down Approach for Eliciting Systems Security Requirements for a Notional Autonomous Space System","display_name":"A Top Down Approach for Eliciting Systems Security Requirements for a Notional Autonomous Space System","publication_year":2019,"publication_date":"2019-04-01","ids":{"openalex":"https://openalex.org/W2974419579","doi":"https://doi.org/10.1109/syscon.2019.8836929","mag":"2974419579"},"language":"en","primary_location":{"id":"doi:10.1109/syscon.2019.8836929","is_oa":false,"landing_page_url":"https://doi.org/10.1109/syscon.2019.8836929","pdf_url":null,"source":{"id":"https://openalex.org/S4306498505","display_name":"2019 IEEE International Systems Conference (SysCon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Systems Conference (SysCon)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054909769","display_name":"Logan O. Mailloux","orcid":"https://orcid.org/0000-0002-7034-8083"},"institutions":[{"id":"https://openalex.org/I2799950915","display_name":"Wright-Patterson Air Force Base","ror":"https://ror.org/0097e1k27","country_code":"US","type":"other","lineage":["https://openalex.org/I1330347796","https://openalex.org/I2799950915","https://openalex.org/I4210089612","https://openalex.org/I4210102105"]},{"id":"https://openalex.org/I4210089612","display_name":"United States Air Force","ror":"https://ror.org/006gmme17","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I4210089612","https://openalex.org/I4210102105"]},{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Logan O. Mailloux","raw_affiliation_strings":["Wright-Patterson Air Force Base, United States Air Force Institute of Technology, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wright-Patterson Air Force Base, United States Air Force Institute of Technology, Ohio","institution_ids":["https://openalex.org/I2799950915","https://openalex.org/I4210089612","https://openalex.org/I55061410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090967051","display_name":"Martin Trae Span","orcid":null},"institutions":[{"id":"https://openalex.org/I430641","display_name":"United States Air Force Academy","ror":"https://ror.org/0055d0g64","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I430641"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Martin Span","raw_affiliation_strings":["United States Air Force Academy, Colorado Springs, Colorado"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"United States Air Force Academy, Colorado Springs, Colorado","institution_ids":["https://openalex.org/I430641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036354767","display_name":"Robert F. Mills","orcid":"https://orcid.org/0000-0001-9404-7616"},"institutions":[{"id":"https://openalex.org/I2799950915","display_name":"Wright-Patterson Air Force Base","ror":"https://ror.org/0097e1k27","country_code":"US","type":"other","lineage":["https://openalex.org/I1330347796","https://openalex.org/I2799950915","https://openalex.org/I4210089612","https://openalex.org/I4210102105"]},{"id":"https://openalex.org/I4210089612","display_name":"United States Air Force","ror":"https://ror.org/006gmme17","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I4210089612","https://openalex.org/I4210102105"]},{"id":"https://openalex.org/I55061410","display_name":"U.S. Air Force Institute of Technology","ror":"https://ror.org/03f9f1d95","country_code":"US","type":"education","lineage":["https://openalex.org/I1294991024","https://openalex.org/I1330347796","https://openalex.org/I1330347796","https://openalex.org/I2802362820","https://openalex.org/I4210089612","https://openalex.org/I4210102105","https://openalex.org/I4210102105","https://openalex.org/I55061410"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert F. Mills","raw_affiliation_strings":["Wright-Patterson Air Force Base, United States Air Force Institute of Technology, Ohio"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wright-Patterson Air Force Base, United States Air Force Institute of Technology, Ohio","institution_ids":["https://openalex.org/I2799950915","https://openalex.org/I4210089612","https://openalex.org/I55061410"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052065733","display_name":"William Young","orcid":null},"institutions":[{"id":"https://openalex.org/I2801461044","display_name":"Eglin Air Force Base","ror":"https://ror.org/002c7zk35","country_code":"US","type":"government","lineage":["https://openalex.org/I1330347796","https://openalex.org/I2801461044","https://openalex.org/I4210089612","https://openalex.org/I4210102105"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Young","raw_affiliation_strings":["53rd Electronic Warfare Group, Eglin Air Force Base, Florida"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"53rd Electronic Warfare Group, Eglin Air Force Base, Florida","institution_ids":["https://openalex.org/I2801461044"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.8057,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.97371303,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/notional-amount","display_name":"Notional amount","score":0.8691580295562744},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.5609942674636841},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5353465676307678},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.5276088714599609},{"id":"https://openalex.org/keywords/requirements-analysis","display_name":"Requirements analysis","score":0.4927733242511749},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.47518932819366455},{"id":"https://openalex.org/keywords/systems-development-life-cycle","display_name":"Systems development life cycle","score":0.45797938108444214},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4459731876850128},{"id":"https://openalex.org/keywords/system-lifecycle","display_name":"System lifecycle","score":0.4383949339389801},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4314414858818054},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.42926955223083496},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4128214120864868},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.41206106543540955},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.41200029850006104},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.40123820304870605},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3395459055900574},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.33431559801101685},{"id":"https://openalex.org/keywords/software-development-process","display_name":"Software development process","score":0.3312583267688751},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.2661065459251404},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.22139817476272583},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.19580966234207153},{"id":"https://openalex.org/keywords/application-lifecycle-management","display_name":"Application lifecycle management","score":0.07929348945617676}],"concepts":[{"id":"https://openalex.org/C192063788","wikidata":"https://www.wikidata.org/wiki/Q7063049","display_name":"Notional amount","level":2,"score":0.8691580295562744},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.5609942674636841},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5353465676307678},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.5276088714599609},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.4927733242511749},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.47518932819366455},{"id":"https://openalex.org/C120617098","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"Systems development life cycle","level":5,"score":0.45797938108444214},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4459731876850128},{"id":"https://openalex.org/C35280785","wikidata":"https://www.wikidata.org/wiki/Q559486","display_name":"System lifecycle","level":4,"score":0.4383949339389801},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4314414858818054},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.42926955223083496},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4128214120864868},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.41206106543540955},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.41200029850006104},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.40123820304870605},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3395459055900574},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.33431559801101685},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.3312583267688751},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2661065459251404},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.22139817476272583},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.19580966234207153},{"id":"https://openalex.org/C30452754","wikidata":"https://www.wikidata.org/wiki/Q621590","display_name":"Application lifecycle management","level":3,"score":0.07929348945617676},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/syscon.2019.8836929","is_oa":false,"landing_page_url":"https://doi.org/10.1109/syscon.2019.8836929","pdf_url":null,"source":{"id":"https://openalex.org/S4306498505","display_name":"2019 IEEE International Systems Conference (SysCon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Systems Conference (SysCon)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5299999713897705,"display_name":"Responsible consumption and production","id":"https://metadata.un.org/sdg/12"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W87635799","https://openalex.org/W1964053994","https://openalex.org/W2042480632","https://openalex.org/W2134732423","https://openalex.org/W2887050683","https://openalex.org/W2963082790","https://openalex.org/W3002590443","https://openalex.org/W6603557143","https://openalex.org/W6773197893"],"related_works":["https://openalex.org/W1988225931","https://openalex.org/W2013238834","https://openalex.org/W2183689037","https://openalex.org/W2101814335","https://openalex.org/W110733897","https://openalex.org/W2766073798","https://openalex.org/W2020194669","https://openalex.org/W1630592501","https://openalex.org/W2113064318","https://openalex.org/W2974419579"],"abstract_inverted_index":{"Today's":[0],"highly":[1],"interconnected":[2],"and":[3,34,57,88,109,130,139,172,180],"technology":[4],"reliant":[5],"environment":[6],"places":[7],"great":[8],"emphasis":[9],"on":[10],"the":[11,45,63,79,94,99,128,150],"need":[12,21],"for":[13,32,38,50],"secure":[14],"cyber-physical":[15],"systems.":[16],"This":[17,68,145],"work":[18,69,146],"addresses":[19],"this":[20,119],"by":[22,155],"detailing":[23],"a":[24,39,73,122,159],"top":[25],"down":[26],"systems":[27,59,129,153,161],"security":[28,36,60,83,90,154,162],"requirements":[29,37,61,163,174],"analysis":[30,164],"approach":[31,49,120,165],"understanding":[33],"eliciting":[35],"notional":[40,74],"space":[41,75],"system.":[42],"More":[43],"specifically,":[44],"System-Theoretic":[46],"Process":[47],"Analysis":[48],"Security":[51],"(STPA-Sec)":[52],"is":[53,102],"used":[54],"to":[55,77,148],"understand":[56],"elicit":[58],"during":[62,112],"conceptual":[64],"stage":[65],"of":[66,81,152],"development.":[67],"employs":[70,121],"STPA-Sec":[71],"in":[72,93,136,168],"system":[76,95,113],"detail":[78],"development":[80],"functional-level":[82],"requirements,":[84],"design-level":[85],"engineering":[86,132],"considerations,":[87],"architectural-level":[89],"specifications":[91],"early":[92],"life":[96],"cycle":[97],"when":[98],"solution":[100],"trade-space":[101],"largest":[103],"rather":[104],"than":[105],"merely":[106],"examining":[107],"components":[108],"adding":[110],"protections":[111],"operation,":[114],"maintenance,":[115],"or":[116],"sustainment.":[117],"Lastly,":[118],"holistic":[123],"viewpoint":[124],"which":[125,166],"aligns":[126],"with":[127,182],"software":[131],"processes":[133],"as":[134],"detailed":[135],"ISO/IEC/IEEE":[137],"152SS":[138],"NIST":[140],"SP":[141],"SOO-160":[142],"Volume":[143],"1.":[144],"seeks":[147],"advance":[149],"science":[151],"providing":[156],"insight":[157],"into":[158],"viable":[160],"results":[167],"traceable":[169],"security,":[170],"safety,":[171],"resiliency":[173],"that":[175],"can":[176],"be":[177],"designed-for,":[178],"built-to,":[179],"verified":[181],"confidence.":[183]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}