Skip to main content

Identifying Implicit Vulnerabilities through Personas as Goal Models.

Faily, S., Iacob, C., Ali, R. and Ki-Aries, D., 2020. Identifying Implicit Vulnerabilities through Personas as Goal Models. In: 4th International Workshop on SECurity and Privacy Requirements Engineering (SECPRE 2020), 14-18 September 2020, Virtual.

Full text available as:

manuscript(1).pdf - Published Version
Available under License Creative Commons Attribution Non-commercial.



When used in requirements processes and tools, personas have the potential to identify vulnerabilities resulting from misalignment between user expectations and system goals. Typically, however, this potential is unfulfilled as personas and system goals are captured with different mindsets, by different teams, and for different purposes. If personas are visualised as goal models, it may be easier for stakeholders to see implications of their goals being satisfied or denied, and designers to incorporate the creation and analysis of such models into the broader RE tool-chain. This paper outlines a tool-supported approach for finding implicit vulnerabilities from user and system goals by reframing personas as social goal models. We illustrate this approach with a case study where previously hidden vulnerabilities based on human behaviour were identified.

Item Type:Conference or Workshop Item (Paper)
Group:Faculty of Science & Technology
ID Code:34422
Deposited By: Symplectic RT2
Deposited On:12 Aug 2020 08:13
Last Modified:14 Mar 2022 14:23


Downloads per month over past year

More statistics for this item...
Repository Staff Only -