{"id":"https://openalex.org/W2113997145","doi":"https://doi.org/10.1145/1413140.1413155","title":"A rigorous methodology for security architecture modeling and verification","display_name":"A rigorous methodology for security architecture modeling and verification","publication_year":2008,"publication_date":"2008-05-12","ids":{"openalex":"https://openalex.org/W2113997145","doi":"https://doi.org/10.1145/1413140.1413155","mag":"2113997145"},"language":"en","primary_location":{"id":"doi:10.1145/1413140.1413155","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1413140.1413155","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th annual workshop on Cyber security and information intelligence research: developing strategies to meet the cyber security and information intelligence challenges ahead","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111905503","display_name":"Yomna Ali","orcid":null},"institutions":[{"id":"https://openalex.org/I80693520","display_name":"American University in Cairo","ror":"https://ror.org/0176yqn58","country_code":"EG","type":"education","lineage":["https://openalex.org/I80693520"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Yomna Ali","raw_affiliation_strings":["American University in Cairo, Egypt","American University in Cairo, Egypt#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"American University in Cairo, Egypt","institution_ids":["https://openalex.org/I80693520"]},{"raw_affiliation_string":"American University in Cairo, Egypt#TAB#","institution_ids":["https://openalex.org/I80693520"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058274053","display_name":"Sherif El-Kassas","orcid":null},"institutions":[{"id":"https://openalex.org/I80693520","display_name":"American University in Cairo","ror":"https://ror.org/0176yqn58","country_code":"EG","type":"education","lineage":["https://openalex.org/I80693520"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Sherif El-Kassas","raw_affiliation_strings":["American University in Cairo, Egypt","American University in Cairo, Egypt#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"American University in Cairo, Egypt","institution_ids":["https://openalex.org/I80693520"]},{"raw_affiliation_string":"American University in Cairo, Egypt#TAB#","institution_ids":["https://openalex.org/I80693520"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I80693520"],"apc_list":null,"apc_paid":null,"fwci":1.0143,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.75622677,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"3"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8187152743339539},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.7040852308273315},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5995824337005615},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5449565052986145},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5445045828819275},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.5049729943275452},{"id":"https://openalex.org/keywords/bridging","display_name":"Bridging (networking)","score":0.4745767116546631},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.4652610123157501},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4338652789592743},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.35445883870124817},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2964414060115814},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.18648627400398254},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.14641696214675903}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8187152743339539},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.7040852308273315},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5995824337005615},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5449565052986145},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5445045828819275},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.5049729943275452},{"id":"https://openalex.org/C174348530","wikidata":"https://www.wikidata.org/wiki/Q188635","display_name":"Bridging (networking)","level":2,"score":0.4745767116546631},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.4652610123157501},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4338652789592743},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.35445883870124817},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2964414060115814},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.18648627400398254},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.14641696214675903}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1413140.1413155","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1413140.1413155","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th annual workshop on Cyber security and information intelligence research: developing strategies to meet the cyber security and information intelligence challenges ahead","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W953200356","https://openalex.org/W1480385994","https://openalex.org/W1519618821","https://openalex.org/W1525753916","https://openalex.org/W1965171366","https://openalex.org/W1976615287","https://openalex.org/W1984936841","https://openalex.org/W2081584487","https://openalex.org/W2097154968","https://openalex.org/W2104846611","https://openalex.org/W2116352900","https://openalex.org/W2117818414","https://openalex.org/W2148336220","https://openalex.org/W2151953478","https://openalex.org/W2153177282","https://openalex.org/W2167321783","https://openalex.org/W2407385691","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2152752131","https://openalex.org/W161255303","https://openalex.org/W1544097700","https://openalex.org/W1488573418","https://openalex.org/W1922520186","https://openalex.org/W4360994451","https://openalex.org/W1946493810","https://openalex.org/W4206910357","https://openalex.org/W2391979747","https://openalex.org/W2981877881"],"abstract_inverted_index":{"Few":[0],"attempts":[1],"have":[2],"been":[3],"made":[4],"at":[5],"defining":[6],"a":[7,31,69,80,87],"formal":[8,138],"and":[9,21,49,73,101,136,140],"traceable":[10],"relationship":[11],"for":[12,34],"integrating":[13],"security":[14,104,134],"in":[15,38],"all":[16],"phases":[17],"of":[18,23,128],"analysis,":[19],"modeling,":[20],"verification":[22,117],"software":[24,41],"systems.":[25],"In":[26],"this":[27],"paper,":[28],"we":[29],"propose":[30,86],"rigorous":[32],"methodology":[33],"utilizing":[35],"threat":[36,62,108],"modeling":[37,109],"building":[39],"secure":[40,81],"architectures":[42],"using":[43,53],"SAM":[44,71,90],"(Software":[45],"Architecture":[46],"Modeling":[47],"framework)":[48],"verifying":[50],"them":[51],"formally":[52],"Symbolic":[54],"Model":[55],"Checking.":[56],"Security":[57],"mitigations":[58],"suggested":[59],"by":[60],"the":[61,94,99,102,107,116,126,130],"model":[63,72,96],"are":[64,74,111],"expressed":[65],"as":[66,113,119],"constraints":[67],"over":[68],"high-level":[70],"used":[75,112],"to":[76,115],"refine":[77],"it":[78],"into":[79,93],"constrained":[82],"model.":[83],"We":[84],"also,":[85],"translation":[88],"from":[89,106],"Secure":[91],"models":[92],"SMV":[95],"checker":[97],"where":[98],"threats":[100],"elicited":[103],"properties":[105],"process":[110],"inputs":[114],"phase":[118],"well.":[120],"This":[121],"method":[122],"is":[123],"developed":[124],"with":[125],"aim":[127],"bridging":[129],"gap":[131],"between":[132],"informal":[133],"requirements":[135],"their":[137],"representation":[139],"verification.":[141]},"counts_by_year":[{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}