Citation Context

...ecurity activity graphs (Section 3.3.4). The root goal of a SGM corresponds to a vulnerability. “Starting with the root, subgoals are incrementally identified until a complete model has been created” =-=[237]-=-. In SGMs, a goal can be anything that affects security or some other goal, e.g., it can be a vulnerability, a security functionality, a security-related software development activity or an attack. SG...

Citation Context

...subgoals; and dashed edges can be thought of as modeling information flow. For VDC generation purpose, we only consider the solid edges, the others are skipped. Also, we adapt the definition given in =-=[33]-=- in order to improve the formalization of scenarios generation. To this aim, let N be a set of all possible nodes. Definition 3 A security goal model T is a 7-tuple (N,N0, nexit, succ, desc, struct, c...