Engineering and Evolving Secure Software Systems

The Engineering and Evolving Secure Software Systems project will help to develop a new area of research on security requirements evolution, which is currently underdeveloped in the UK.

As part of the project Professor John Mylopoulos will come to Brighton as a Distinguished Visiting Fellow. He will bring his experience together with results from his recent projects to enhance the current work at SenSe, and he will also deliver lectures, seminars and workshops and will engage in research discussions and activities with staff, students and industrial collaborators at the University of Brighton and three other UK universities: University College London, City University and the Open University.

The main activity of the project is to initiate research in a rapidly developing area, that of security requirements evolution, which is currently underdeveloped in the UK. The project will enhance our research capability on security requirements engineering, and it will focus on extending modelling languages and processes, developed by the SenSe group, with input from Professor Mylopoulos and the notion of evolution, as defined in ERC Lucretius.

Project aims

We aim to develop techniques for engineering software systems that evolve in response to security requirements changes, which might be related to organisational needs (e.g. security policy change) or might be dictated by outside factors (e.g. new laws on data protection). This is, to the best of our knowledge, the first attempt in the literature to develop requirements engineering techniques to support the management of security requirements evolution.

We will focus on socio-technical systems operating in a socio-legal context and constrained by business processes and regulatory frameworks. Managing security requirements evolution in that context is a particularly difficult challenge because of the complexity, heterogeneity and fluidity of the system components, and the unpredictability and openness of the environments in which they operate.

A second main activity for the project is the organisation of a series of events and activities to benefit from Professor Mylopoulos’s expertise and experience.

Project findings and impacts

Professor Mylopoulos' visit will result in the preparation of research papers, discussions and exploration of future research collaboration and grant proposals. A workshop will also be organised and a special issue proposal will be submitted for consideration.

 

Research team

Professor Haris Mouratidis

 

Output

To follow as the project progresses

 

Partners

Professor John Mylopoulos

Professor John Mylopoulos has held positions at the University of Toronto (Assistant/Associate/Full Professor) and University of Trento (Distinguished Professor/Chiara Fama). He is currently Senior Researcher at Trento, Professor Emeritus at Toronto, and Fellow of the Royal Society of Canada, of the Entity-Relationship Foundation, and of the Canadian Artificial Intelligence Association. He was visiting Associate Professor at Harvard University, Visiting Professor at the University of Rome, and visiting Research Professor at City University of Hong Kong. In recognition of his contribution to the research community, he was awarded the 2010 Peter P. Chen award, a lifetime service award (IEEE Requirements Engineering Conference), and an Honorary Doctorate degree (RWTH-Aachen University). He was president of the Canadian Society for Computational Studies of Intelligence and of the VLDB endowment.

University College, London

City University

The Open University