Early model-based risk analysis for mobile, distributed applications

Abstract

Applications that include mobile components are exposed to particular risks. For example, communication in mobile, distributed applications poses a challenge in terms of data security and security against eavesdropping. A separate protection requirement analysis is therefore required in the context of these applications. Using the example of an information system with mobile connected clients, this article shows how a consistent security and risk analysis can be integrated into the model-based development process of such a system. Possible weaknesses in the system can thus be identified and eliminated in the early development phases.