eprintid: 1425725 rev_number: 28 eprint_status: archive userid: 608 dir: disk0/01/42/57/25 datestamp: 2014-05-13 10:21:10 lastmod: 2021-12-20 00:59:52 status_changed: 2014-05-13 10:21:10 type: proceedings_section metadata_visibility: show item_issues_count: 0 creators_name: Pym, D creators_name: Caulfield, T creators_name: Williams, J title: Compositional security modelling: structure, economics, and behaviour ispublished: pub divisions: UCL divisions: B04 divisions: C05 divisions: F48 note: The original publication is available at www.springerlink.com abstract: Security managers face the challenge of formulating and implementing policies that deliver their desired system security postures --- for example, their preferred balance of confidentiality, integrity, and availability --- within budget (monetary and otherwise). In this paper, we describe a security modelling methodology, grounded in rigorous mathematical systems modelling and economics, that captures the managers' policies and the behavioural choices of agents operating within the system. Models are executable, so allowing systematic experimental exploration of the system-policy co-design space, and compositional, so managing the complexity of large-scale systems. date: 2014 publisher: Springer International Publishing official_url: http://dx.doi.org/10.1007/978-3-319-07620-1_21 vfaculties: VENG oa_status: green full_text_type: other language: eng primo: open primo_central: open_green verified: verified_manual elements_source: Manually entered elements_id: 939759 doi: 10.1007/978-3-319-07620-1_21 isbn_13: 9783319076195 lyricists_name: Caulfield, Tristan lyricists_name: Pym, David lyricists_id: TCAUL00 lyricists_id: DPYMX87 full_text_status: public place_of_pub: Switzerland pagerange: 233-245 event_title: Second International Conference, HAS 2014, Held as Part of HCI International 2014, Heraklion, Crete, Greece, June 22-27, 2014 event_location: Heraklion, Greece book_title: Lecture Notes in Computer Science editors_name: Tryfonas, T editors_name: Askoxylakis, I citation: Pym, D; Caulfield, T; Williams, J; (2014) Compositional security modelling: structure, economics, and behaviour. In: Tryfonas, T and Askoxylakis, I, (eds.) Lecture Notes in Computer Science. (pp. pp. 233-245). Springer International Publishing: Switzerland. Green open access document_url: https://discovery.ucl.ac.uk/id/eprint/1425725/1/caulfield-pym-williams-hci2014.pdf