How to Develop Security Case by Combining Real Life Security Experiences (Evidence) with D-case

摘要

In this paper we present a new reasonable method for writing security cases. A security case is one form of assurance case as there are other forms such as safety case, reliability case, dependability case and so on. Assurance case is a technique to structure assurance requirements concerning a system. It contains argumentation structure and evidence to convince a stakeholder that a certain concern on whether it is safety, reliability or security is being assured by the implementation of proper and appropriate actions that counters the risks or vulnerabilities raised by the concerned stakeholder. A security case is somehow very unpopular if we compare it to a safety case. And therefore, it is safe to say that so far; safety cases are better versed than security cases. However, due to the ever-growing concerns of the area of Cyber-Security, it is extremely crucial to produce effective and accurate security cases for cyber-systems.