Security Requirements Engineering through Iterative Intrusion-Aware Design

Fundamental to the Survivable Network Analysis (SNA) method, developed at the SEI [2], is the use of intrusion scenarios to improve the survivability of system designs. This position statement describes some relevant insights gained from applying SNA to several significant real-world systems. These insights help understand what is needed to use intrusion scenarios for security requirements engineering in a spiral-type, intrusion-aware development process. Specifically, I describe a scalable organization technique for intrusion scenarios that ameliorates some of the problems that we’ve encountered. I conclude with several key obstacles to using intrusion scenarios for security requirements engineering.