Modelling secure multiagent systems

ABSTRACT

Security plays an important role in the development of multiagent systems. However, a careful analysis of software development processes shows that the definition of security requirements is, usually, considered after the design of the system. This is, mainly, due to the fact that agent oriented software engineering methodologies have not integrated security concerns throughout their developing stages. The integration of security concerns during the whole range of the development stages could help towards the development of more secure multiagent systems. In this paper we introduce extensions to the Tropos methodology to enable it to model security concerns throughout the whole development process. A description of the new concepts is given along with an explanation of how these concepts are integrated to the current stages of Tropos. An example from the health care sector is used to illustrate the above.

REFERENCES

• 1: N. R. Jennings, M. Wooldridge, "Agent-Oriented Software Engineering" in Handbook of Agent Technology (ed. J. Bradshaw) AAAI/MIT Press 2001
• 2: Carlos Argel Iglesias , Mercedes Garijo , José Centeno-González, A Survey of Agent-Oriented Methodologies, Proceedings of the 5th International Workshop on Intelligent Agents V, Agent Theories, Architectures, and Languages, p.317-330, July 04-07, 1998
• 3: Michael Wooldridge , Nicholas R. Jennings , David Kinny, The Gaia Methodology for Agent-Oriented Analysis and Design, Autonomous Agents and Multi-Agent Systems, v.3 n.3, p.285-312, September 2000 [doi>10.1023/A:1010071910869]
• 4: William Stallings, Cryptography and network security (2nd ed.): principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998
• 5: Jaelson Castro , Manuel Kolp , John Mylopoulos, A Requirements-Driven Development Methodology, Proceedings of the 13th International Conference on Advanced Information Systems Engineering, p.108-123, June 04-08, 2001
• 6: Paolo Bresciani , Anna Perini , Paolo Giorgini , Fausto Giunchiglia , John Mylopoulos, A knowledge level software engineering methodology for agent oriented programming, Proceedings of the fifth international conference on Autonomous agents, p.648-655, May 2001, Montreal, Quebec, Canada [doi>10.1145/375735.376477]
• 7: Bernhard Bauer , Jörg P. Müller , James Odell, Agent UML: a formalism for specifying multiagent software systems, First international workshop, AOSE 2000 on Agent-oriented software engineering, p.91-103, January 2001, Limerick, Ireland
• 8: H. Mouratidis, P. Giorgini, G. Manson, I. Philp, "A Natural Extension of Tropos Methodology for Modelling Security", In the Proceedings of the Agent Oriented Methodologies Workshop (OOPSLA 2002), Seattle-USA, November 2002
• 9: H. Mouratidis, "Extending Tropos Methodology to accommodate Security", Computer Science Report, University of Sheffield, September 2002
• 10: Paolo Bresciani , Anna Perini , Paolo Giorgini , Fausto Giunchiglia , John Mylopoulos, Modeling Early Requirements in Tropos: A Transformation Based Approach, Revised Papers and Invited Contributions from the Second International Workshop on Agent-Oriented Software Engineering II, p.151-168, May 29, 2001
• 11: H. Mouratidis, i. Philp, G. Manson, "Analysis and Design of eSAP: An Integrated Health and Social Care Information System", in the Proceedings of the 7th International Symposium on Health Information Managements Research (ISHIMR2002), Sheffield, June 2002
• 12: L. Liu, E. Yu, J. Mylopoulos, "Analysing Security Requirements as Relationships Among Strategic Actors", in the Proceedings of 2nd Symposium on Requirements Engineering for Information Security, North Carolina - USA, November 2002.
• 13: Torsten Lodderstedt , David A. Basin , Jürgen Doser, SecureUML: A UML-Based Modeling Language for Model-Driven Security, Proceedings of the 5th International Conference on The Unified Modeling Language, p.426-441, September 30-October 04, 2002
• 14: M.P. Huget, "Nemo: An Agent-Oriented Software Engineering Methodology", in the Proceedings of the Agent Oriented Methodologies Workshop (OOPSLA 2002), Seattle - USA, November 2002.

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
        D.2.10 Design**
            Subjects: Methodologies**

Additional Classification:
  I. Computing Methodologies
  I.2 ARTIFICIAL INTELLIGENCE
        I.2.11 Distributed Artificial Intelligence
            Subjects: Multiagent systems

General Terms:
Design, Security

Keywords:
agent oriented software engineering, methodologies, multiagent systems, security, tropos