Analysis - Use cases

Question 1

What is the process of Analysis?

Answer 1

• Understand the existing situation
• Identifying improvements
• Define requirements for the new system (May skip some steps if there is no current system in place.)

Question 2

What is the outputs of the Analysis phase?

Answer 2

• List of requirements

-Use Cases

-Process Model

-Data Model

Question 3

What is a use case?

Answer 3

• Set of all use cases represents all the possible interactions in the system

Question 4

What does UML mean?

Answer 4

Unified Modelling Language

Question 5

How can a use case be shown?

Answer 5

• Text-based use cases. Show all the details
• Use case diagrams. Drawn from the above to give a useful visual overview of the system

Question 6

What is a Misuse case?

Answer 6

• Suggested by Sindre & Opdahl to summaries the possible actions that COULD occur with a system that might cause harm
• Could be malicious or accidental

-Also includes mitigation use cases to counter the threats

Question 7

What processes do Misuse use to elicit security requirements?

Answer 7

• Identify critical assets
• Define security goals (for each asset)
• Identify threats
• Identify risks ( using standard techniques)
• Define security requirements