{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,16]],"date-time":"2025-12-16T01:10:15Z","timestamp":1765847415053,"version":"3.48.0"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030643294"},{"type":"electronic","value":"9783030643300"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-64330-0_12","type":"book-chapter","created":{"date-parts":[[2020,12,16]],"date-time":"2020-12-16T02:02:44Z","timestamp":1608084164000},"page":"185-202","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Identifying Implicit Vulnerabilities Through Personas as Goal Models"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2859-1143","authenticated-orcid":false,"given":"Shamal","family":"Faily","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1032-7598","authenticated-orcid":false,"given":"Claudia","family":"Iacob","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5285-7829","authenticated-orcid":false,"given":"Raian","family":"Ali","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8114-2737","authenticated-orcid":false,"given":"Duncan","family":"Ki-Aries","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,12,17]]},"reference":[{"issue":"8","key":"12_CR1","doi-asserted-by":"publisher","first-page":"841","DOI":"10.1002\/int.20433","volume":"25","author":"D Amyot","year":"2010","unstructured":"Amyot, D., Ghanavati, S., Horkoff, J., Mussbacher, G., Peyton, L., Yu, E.: Evaluating goal models within the goal-oriented requirement language. Int. J. Intell. Syst. 25(8), 841\u2013877 (2010)","journal-title":"Int. J. Intell. Syst."},{"key":"12_CR2","unstructured":"AT&T: Graphviz Web Site (2020). http:\/\/www.graphviz.org"},{"issue":"4","key":"12_CR3","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1109\/MS.2013.80","volume":"30","author":"J Cleland-Huang","year":"2013","unstructured":"Cleland-Huang, J.: Meet elaine: a persona-driven approach to exploring architecturally significant requirements. IEEE Softw. 30(4), 18\u201321 (2013)","journal-title":"IEEE Softw."},{"key":"12_CR4","volume-title":"About Face: The Essentials of Interaction Design","author":"A Cooper","year":"2014","unstructured":"Cooper, A., Reimann, R., Cronin, D., Noessel, C.: About Face: The Essentials of Interaction Design. Wiley, Hoboken (2014)"},{"issue":"1","key":"12_CR5","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/s00766-009-0090-z","volume":"15","author":"G Elahi","year":"2010","unstructured":"Elahi, G., Yu, E., Zannone, N.: A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilities. Requir. Eng. 15(1), 41\u201362 (2010). https:\/\/doi.org\/10.1007\/s00766-009-0090-z","journal-title":"Requir. Eng."},{"key":"12_CR6","unstructured":"Faily, S.: Bridging user-centered design and requirements engineering with GRL and persona cases. In: Proceedings of the 5th International i* Workshop, pp. 114\u2013119. CEUR Workshop Proceedings (2011)"},{"key":"12_CR7","doi-asserted-by":"publisher","unstructured":"Faily, S.: Designing Usable and Secure Software with IRIS and CAIRIS. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-75493-2_9","DOI":"10.1007\/978-3-319-75493-2_9"},{"key":"12_CR8","doi-asserted-by":"crossref","unstructured":"Faily, S., Fl\u00e9chais, I.: Barry is not the weakest link: eliciting secure system requirements with personas. In: Proceedings of the 24th BCS Interaction Specialist Group Conference, pp. 124\u2013132. BCS (2010)","DOI":"10.14236\/ewic\/HCI2010.17"},{"key":"12_CR9","doi-asserted-by":"crossref","unstructured":"Faily, S., Fl\u00e9chais, I.: Persona cases: a technique for grounding personas. In: Proceedings of the 29th ACM CHI Conference on Human Factors in Computing Systems, pp. 2267\u20132270. ACM (2011)","DOI":"10.1145\/1978942.1979274"},{"key":"12_CR10","doi-asserted-by":"crossref","unstructured":"Faily, S., Fl\u00e9chais, I.: Eliciting and visualising trust expectations using persona trust characteristics and goal models. In: Proceedings of the 6th International Workshop on Social Software Engineering, pp. 17\u201324. ACM (2014)","DOI":"10.1145\/2661685.2661690"},{"key":"12_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1007\/978-3-030-62230-5_10","volume-title":"Graphical Models for Security","author":"S Faily","year":"2020","unstructured":"Faily, S., Scandariato, R., Shostack, A., Sion, L., Ki-Aries, D.: Contextualisation of data flow diagrams for security analysis. In: Eades III, H., Gadyatskaya, O. (eds.) GraMSec 2020. LNCS, vol. 12419, pp. 186\u2013197. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-62230-5_10"},{"key":"12_CR12","doi-asserted-by":"crossref","unstructured":"Friess, E.: Personas and decision making in the design process: an ethnographic case study. In: Proceedings of the 30th ACM CHI Conference on Human Factors in Computing Systems, pp. 1209\u20131218. ACM (2012)","DOI":"10.1145\/2207676.2208572"},{"key":"12_CR13","doi-asserted-by":"crossref","unstructured":"Giorgini, P., Massacci, F., Mylopoulos, J., Zannone, N.: Modeling security requirements through ownership, permission and delegation. In: 13th IEEE International Conference on Requirements Engineering, pp. 167\u2013176 (2005)","DOI":"10.1109\/RE.2005.43"},{"key":"12_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1007\/3-540-45816-6_22","volume-title":"Conceptual Modeling \u2014 ER 2002","author":"P Giorgini","year":"2002","unstructured":"Giorgini, P., Mylopoulos, J., Nicchiarelli, E., Sebastiani, R.: Reasoning with goal models. In: Spaccapietra, S., March, S.T., Kambayashi, Y. (eds.) ER 2002. LNCS, vol. 2503, pp. 167\u2013181. Springer, Heidelberg (2002). https:\/\/doi.org\/10.1007\/3-540-45816-6_22"},{"key":"12_CR15","volume-title":"Requirements Engineering: From System Goals to UML Models to Software Specifications","author":"A van Lamsweerde","year":"2009","unstructured":"van Lamsweerde, A.: Requirements Engineering: From System Goals to UML Models to Software Specifications. Wiley, Hoboken (2009)"},{"key":"12_CR16","doi-asserted-by":"crossref","unstructured":"Liu, L., Yu, E., Mylopoulos, J.: Security and privacy requirements analysis within a social setting. In: Proceedings of the 11th IEEE International Requirements Engineering Conference, pp. 151\u2013161 (2003)","DOI":"10.1109\/ICRE.2003.1232746"},{"key":"12_CR17","first-page":"337","volume-title":"Social Modeling for Requirements Engineering","author":"F Massacci","year":"2011","unstructured":"Massacci, F., Zannone, N.: Detecting conflicts between functional and security requirements with Secure Tropos: John Rusnak and the Allied Irish Bank. In: Yu, E., Giorgini, P., Maiden, N., Mylopoulos, J. (eds.) Social Modeling for Requirements Engineering, pp. 337\u2013362. MIT Press, Cambridge (2011)"},{"key":"12_CR18","doi-asserted-by":"crossref","unstructured":"Matthews, T., Whittaker, S., Moran, T.P., Yuen, S.: Collaboration personas: a new approach to designing workplace collaboration tools. In: Proceedings of the 29th ACM CHI Conference on Human Factors in Computing Systems, pp. 2247\u20132256 (2011)","DOI":"10.1145\/1978942.1979272"},{"key":"12_CR19","doi-asserted-by":"crossref","unstructured":"Mead, N., Shull, F., Spears, J., Heibl, S., Weber, S., Cleland-Huang, J.: Crowd sourcing the creation of personae non gratae for requirements-phase threat modeling. In: Proceedings of the 25th International Requirements Engineering Conference, pp. 412\u2013417 (2017)","DOI":"10.1109\/RE.2017.63"},{"key":"12_CR20","doi-asserted-by":"crossref","unstructured":"Moody, D.L., Heymans, P., Matulevicius, R.: Improving the effectiveness of visual representations in requirements engineering: an evaluation of i* visual syntax. In: Proceedings of the 17th IEEE International Requirements Engineering Conference, pp. 171\u2013180. IEEE (2009)","DOI":"10.1109\/RE.2009.44"},{"issue":"2","key":"12_CR21","doi-asserted-by":"publisher","first-page":"285","DOI":"10.1142\/S0218194007003240","volume":"17","author":"H Mouratidis","year":"2007","unstructured":"Mouratidis, H., Giorgini, P.: Secure Tropos: a security-oriented extension of the Tropos methodology. Int. J. Softw. Eng. Knowl. Eng. 17(2), 285\u2013309 (2007)","journal-title":"Int. J. Softw. Eng. Knowl. Eng."},{"key":"12_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"352","DOI":"10.1007\/978-3-319-77243-1_23","volume-title":"Requirements Engineering: Foundation for Software Quality","author":"G Nunes Rodrigues","year":"2018","unstructured":"Nunes Rodrigues, G., Joel Tavares, C., Watanabe, N., Alves, C., Ali, R.: A persona-based modelling for contextual requirements. In: Kamsties, E., Horkoff, J., Dalpiaz, F. (eds.) REFSQ 2018. LNCS, vol. 10753, pp. 352\u2013368. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-319-77243-1_23"},{"key":"12_CR23","unstructured":"Paja, E., Dalpiaz, F., Giorgini, P.: Designing secure socio-technical systems with STS-ml. In: Proceedings of the 6th International i* Workshop 2013, pp. 79\u201384 (2013)"},{"key":"12_CR24","first-page":"607","volume-title":"Social Modeling for Requirements Engineering","author":"O Pastor","year":"2011","unstructured":"Pastor, O., Estrada, H., Mart\u00ednez, A.: Strengths and weaknesses of the i* framework: an empirical evaluation. In: Yu, E., Giorgini, P., Maiden, N., Mylopoulos, J. (eds.) Social Modeling for Requirements Engineering, pp. 607\u2013643. MIT Press, Cambridge (2011)"},{"key":"12_CR25","doi-asserted-by":"crossref","unstructured":"Regev, G., Wegmann, A.: Where do goals come from: the underlying principles of goal-oriented requirements engineering. In: 13th IEEE International Conference on Requirements Engineering, pp. 353\u2013362 (2005)","DOI":"10.1109\/RE.2005.80"},{"issue":"4","key":"12_CR26","first-page":"493","volume":"69","author":"HA Simon","year":"1979","unstructured":"Simon, H.A.: Rational decision making in business organizations. Am. Econ. Rev. 69(4), 493\u2013513 (1979)","journal-title":"Am. Econ. Rev."},{"key":"12_CR27","doi-asserted-by":"publisher","first-page":"247","DOI":"10.1007\/978-3-540-72677-7_15","volume-title":"Conceptual Modelling in Information Systems Engineering","author":"G Sindre","year":"2007","unstructured":"Sindre, G., Opdahl, A.L.: Capturing dependability threats in conceptual modelling. In: Krogstie, J., Opdahl, A.L., Brinkkemper, S. (eds.) Conceptual Modelling in Information Systems Engineering, pp. 247\u2013260. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-72677-7_15"},{"key":"12_CR28","unstructured":"Yu, E.: Modeling strategic relationships for process reengineering. Ph.D. thesis, University of Toronto (1995)"},{"key":"12_CR29","doi-asserted-by":"crossref","unstructured":"Yu, E.: Towards modeling and reasoning support for early-phase requirements engineering. In: Proceedings of the 3rd IEEE International Symposium on Requirements Engineering, pp. 226\u2013235. IEEE (1997)","DOI":"10.1109\/ISRE.1997.566873"},{"key":"12_CR30","volume-title":"Social Modeling for Requirements Engineering","author":"E Yu","year":"2011","unstructured":"Yu, E., Giorgini, P., Maiden, N., Mylopoulos, J.: Social modeling for requirements engineering: an introduction. In: Yu, E. (ed.) Social Modeling for Requirements Engineering. MIT Press, Cambridge (2011)"},{"key":"12_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"99","DOI":"10.1007\/978-3-642-02463-4_7","volume-title":"Conceptual Modeling: Foundations and Applications","author":"ES Yu","year":"2009","unstructured":"Yu, E.S.: Social modeling and i*. In: Borgida, A.T., Chaudhri, V.K., Giorgini, P., Yu, E.S. (eds.) Conceptual Modeling: Foundations and Applications. LNCS, vol. 5600, pp. 99\u2013121. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-02463-4_7"}],"container-title":["Lecture Notes in Computer Science","Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-64330-0_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,16]],"date-time":"2025-12-16T01:02:12Z","timestamp":1765846932000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-64330-0_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030643294","9783030643300"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-64330-0_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"17 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SECPRE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Workshop on Security and Privacy Requirements Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 September 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 September 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"secpre2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.surrey.ac.uk\/esorics-2020\/workshops","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easycaheir","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"57% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"1","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"No","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}