New laws,such as HIPAA and SOX,are increasingly impacting the design of software systems,as business organisations strive to comply. This paper studies the problem of generating a set of requirements for a new system which comply with a given law. Specifically,the paper proposes a systematic process for generating law-compliant requirements by using a taxonomy of legal concepts and a set of primitives to describe stakeholders and their strategic goals. Given a model of law and a model of stakeholders goals,legal alternatives are identified and explored. Strategic goals that can realise legal prescriptions are systematically analysed,and alternative ways of fulfilling a law are evaluated. The approach is demonstrated by means of a case study. This work is part of the Nomos framework,intended to support the design of law-compliant requirements models.
Scheda prodotto non validato
Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte di FBK.
Titolo: | Formalization and validation of a subset of the European Train Control System |
Autori: | |
Data di pubblicazione: | 2010 |
Abstract: | New laws,such as HIPAA and SOX,are increasingly impacting the design of software systems,as business organisations strive to comply. This paper studies the problem of generating a set of requirements for a new system which comply with a given law. Specifically,the paper proposes a systematic process for generating law-compliant requirements by using a taxonomy of legal concepts and a set of primitives to describe stakeholders and their strategic goals. Given a model of law and a model of stakeholders goals,legal alternatives are identified and explored. Strategic goals that can realise legal prescriptions are systematically analysed,and alternative ways of fulfilling a law are evaluated. The approach is demonstrated by means of a case study. This work is part of the Nomos framework,intended to support the design of law-compliant requirements models. |
Handle: | http://hdl.handle.net/11582/9328 |
ISBN: | 9781605587196 |
Appare nelle tipologie: | 4.1 Contributo in Atti di convegno |