Using Relax Operators into an MDE Security Requirement Elicitation Process for Systems of Systems

Abstract

Systems of systems (SoS) are large-scale systems composed of complex systems with difficult to elicit and model emergent properties. One of the most significant challenges in the engineering of such systems is how to elicit their non-functional requirements such as security. In this proposal paper we introduce a Model Driven Engineering (MDE) security requirement process for SoS. It is based on the Relax language to define invariant and relaxed security requirements. This enables taking into account security concerns early in the requirements phase of the SoS. We illustrate our process on a maritime safety and security case study.