Shamal Faily, Claudia Iacob, Raian Ali and Duncan Ki-Aries
This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions.
Abstract
Purpose
This paper aims to present a tool-supported approach for visualising personas as social goal models, which can subsequently be used to identify security tensions.
Design/methodology/approach
The authors devised an approach to partially automate the construction of social goal models from personas. The authors provide two examples of how this approach can identify previously hidden implicit vulnerabilities and validate ethical hazards faced by penetration testers and their safeguards.
Findings
Visualising personas as goal models makes it easier for stakeholders to see implications of their goals being satisfied or denied and designers to incorporate the creation and analysis of such models into the broader requirements engineering (RE) tool-chain.
Originality/value
The approach can be used with minimal changes to existing user experience and goal modelling approaches and security RE tools.