{"id":"https://openalex.org/W4391527010","doi":"https://doi.org/10.1145/3628034.3628044","title":"Formal model-based argument patterns for security cases","display_name":"Formal model-based argument patterns for security cases","publication_year":2023,"publication_date":"2023-07-05","ids":{"openalex":"https://openalex.org/W4391527010","doi":"https://doi.org/10.1145/3628034.3628044"},"language":"en","primary_location":{"id":"doi:10.1145/3628034.3628044","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3628034.3628044","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3628034.3628044","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th European Conference on Pattern Languages of Programs","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3628034.3628044","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010606472","display_name":"Marwa Zeroual","orcid":"https://orcid.org/0000-0002-4990-4145"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]},{"id":"https://openalex.org/I4210119061","display_name":"Institut de Recherche en Informatique de Toulouse","ror":"https://ror.org/01rx4qw44","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I205747304","https://openalex.org/I4210119061","https://openalex.org/I4210152422","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Marwa Zeroual","raw_affiliation_strings":["Universit\u00e9 Paris-Saclay, CEA, List, France and IRIT, CNRS, UT2, France"],"raw_orcid":"https://orcid.org/0000-0002-4990-4145","affiliations":[{"raw_affiliation_string":"Universit\u00e9 Paris-Saclay, CEA, List, France and IRIT, CNRS, UT2, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210119061"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060963232","display_name":"Brahim Hamid","orcid":"https://orcid.org/0000-0002-2199-3916"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I4210119061","display_name":"Institut de Recherche en Informatique de Toulouse","ror":"https://ror.org/01rx4qw44","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I205747304","https://openalex.org/I4210119061","https://openalex.org/I4210152422","https://openalex.org/I4405258862","https://openalex.org/I4405259414"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Brahim Hamid","raw_affiliation_strings":["IRIT, CNRS, UT2, France"],"raw_orcid":"https://orcid.org/0000-0002-2199-3916","affiliations":[{"raw_affiliation_string":"IRIT, CNRS, UT2, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I4210119061"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081937832","display_name":"Morayo Adedjouma","orcid":"https://orcid.org/0000-0003-0218-028X"},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Morayo Adedjouma","raw_affiliation_strings":["Universit\u00e9 Paris-Saclay, CEA, List, France"],"raw_orcid":"https://orcid.org/0000-0003-0218-028X","affiliations":[{"raw_affiliation_string":"Universit\u00e9 Paris-Saclay, CEA, List, France","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039439171","display_name":"Jason Jaskolka","orcid":"https://orcid.org/0000-0001-6316-3040"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Jason Jaskolka","raw_affiliation_strings":["Department of Systems and Computer Engineering, Carleton University, Canada"],"raw_orcid":"https://orcid.org/0000-0001-6316-3040","affiliations":[{"raw_affiliation_string":"Department of Systems and Computer Engineering, Carleton University, Canada","institution_ids":["https://openalex.org/I67031392"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6015,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.93956487,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7290458679199219},{"id":"https://openalex.org/keywords/argument","display_name":"Argument (complex analysis)","score":0.7120599150657654},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.6646461486816406},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6576017737388611},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.5800765752792358},{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.5765396356582642},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5670456886291504},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.5432606339454651},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.5109173655509949},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4805715084075928},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4798988103866577},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.45554226636886597},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.45241591334342957},{"id":"https://openalex.org/keywords/formal-system","display_name":"Formal system","score":0.4308871328830719},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.4160163402557373},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.29833805561065674},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.24131351709365845},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.23230934143066406},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17161867022514343},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.08563420176506042}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7290458679199219},{"id":"https://openalex.org/C98184364","wikidata":"https://www.wikidata.org/wiki/Q1780131","display_name":"Argument (complex analysis)","level":2,"score":0.7120599150657654},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.6646461486816406},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6576017737388611},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.5800765752792358},{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.5765396356582642},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5670456886291504},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.5432606339454651},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.5109173655509949},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4805715084075928},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4798988103866577},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.45554226636886597},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.45241591334342957},{"id":"https://openalex.org/C102315432","wikidata":"https://www.wikidata.org/wiki/Q649732","display_name":"Formal system","level":2,"score":0.4308871328830719},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.4160163402557373},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.29833805561065674},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.24131351709365845},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.23230934143066406},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17161867022514343},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08563420176506042},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3628034.3628044","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3628034.3628044","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3628034.3628044","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th European Conference on Pattern Languages of Programs","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:cea-04496428v1","is_oa":false,"landing_page_url":"https://cea.hal.science/cea-04496428","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"28th European Conference on Pattern Languages of Programs (EuroPLoP 2023), Jul 2023, Irsee, Germany. pp.1-12, &#x27E8;10.1145/3628034.3628044&#x27E9;","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:HAL:hal-04479710v1","is_oa":false,"landing_page_url":"https://hal.science/hal-04479710","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EuroPLoP 2023: 28th European Conference on Pattern Languages of Programs, Jul 2023, Irsee Germany, France. pp.1-12, &#x27E8;10.1145/3628034.3628044&#x27E9;","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3628034.3628044","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3628034.3628044","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3628034.3628044","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 28th European Conference on Pattern Languages of Programs","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4391527010.pdf","grobid_xml":"https://content.openalex.org/works/W4391527010.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W572872720","https://openalex.org/W1502211585","https://openalex.org/W1517942333","https://openalex.org/W1895387792","https://openalex.org/W1975322045","https://openalex.org/W1992707013","https://openalex.org/W2029344129","https://openalex.org/W2165848285","https://openalex.org/W2322534758","https://openalex.org/W2563671384","https://openalex.org/W2566527471","https://openalex.org/W2747302614","https://openalex.org/W2770702223","https://openalex.org/W3046679832","https://openalex.org/W3135014913","https://openalex.org/W3170375891","https://openalex.org/W4225968144","https://openalex.org/W4231365309","https://openalex.org/W4235576719","https://openalex.org/W4245580181","https://openalex.org/W4253678082","https://openalex.org/W4386922898","https://openalex.org/W7039388619"],"related_works":["https://openalex.org/W1811024770","https://openalex.org/W4230385779","https://openalex.org/W2017116761","https://openalex.org/W2013238834","https://openalex.org/W2412133583","https://openalex.org/W2542633692","https://openalex.org/W1963623648","https://openalex.org/W2018644264","https://openalex.org/W1976635772","https://openalex.org/W2056412463"],"abstract_inverted_index":{"Assuring":[0],"that":[1,37,46],"security":[2,34,51,91,107,111,119,125,138,159],"requirements":[3,52,108],"have":[4],"been":[5],"met":[6],"and":[7,53,57,72,109,118,121],"detecting":[8],"flaws":[9],"in":[10],"the":[11,15,47,62,101,115,124,130,133,137,142,147,155],"early":[12],"phases":[13],"of":[14,28,64,69,132,136,161],"system":[16,24,48,116],"development":[17],"is":[18,68],"less":[19],"expensive":[20],"than":[21],"changes":[22],"after":[23],"deployment.":[25],"The":[26,97],"deployment":[27],"industrial":[29],"critical":[30],"systems":[31],"requires":[32],"a":[33,39,77],"assurance":[35,66,92],"case":[36,67,165],"represents":[38],"credible":[40],"argument,":[41],"supported":[42,128],"by":[43,129],"evidence,":[44],"demonstrating":[45],"satisfies":[49],"its":[50],"objectives.":[54],"Building":[55],"arguments":[56],"generating":[58],"evidence":[59],"to":[60,89,157],"support":[61],"claims":[63],"an":[65,87,162],"utmost":[70],"importance":[71],"should":[73],"be":[74],"done":[75],"using":[76,94,146],"rigorous":[78],"mathematical":[79],"basis,":[80],"namely":[81],"formal":[82,95,134],"methods.":[83,96],"This":[84],"paper":[85],"proposes":[86],"approach":[88,99],"constructing":[90],"cases":[93,160],"proposed":[98],"involves":[100],"following":[102],"three":[103],"steps:":[104],"(1)":[105],"decomposing":[106],"deriving":[110,123],"threats;":[112,120],"(2)":[113],"formalizing":[114],"model":[117],"(3)":[122],"argument":[126,144],"patterns":[127,145,156],"results":[131],"verification":[135],"requirements.":[139],"We":[140,153],"present":[141],"derived":[143],"Goal":[148],"Structure":[149],"Notation":[150],"pattern":[151],"notation.":[152],"apply":[154],"build":[158],"autonomous":[163],"drone":[164],"study":[166],"system.":[167]},"counts_by_year":[{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}
