Assurance Cases as a Didactic Tool for Information Security

Roberto Gallo (1, 2) , Ricardo Dahab (1)

1 UNICAMP - Universidade Estadual de Campinas = University of Campinas
2 KRYPTUS Information Security [Campinas, SP, Brazil]

Secure systems are fiercely difficult to obtain - technical, procedural, human, and managerial aspects must be contemplated in a deep, yet holistic approach, which is a complex task even for experienced information security practitioners. Emerging information security “Assurance Cases” methodologies, such as the military NATO AEP-67, promise (time) effective practices for obtaining secure systems, making it a more reproducible process. In this paper we are the first to report the effectiveness of the Assurance Case methodology as a framework for teaching information security to both individuals and teams.

Domaines: Informatique [cs]

Roberto Gallo, Ricardo Dahab. Assurance Cases as a Didactic Tool for Information Security. 9th IFIP World Conference on Information Security Education (WISE), May 2015, Hamburg, Germany. pp.15-26, ⟨10.1007/978-3-319-18500-2_2⟩. ⟨hal-01334301⟩