Misuse Cases: Use Cases with Hostile Intent

By Ian F. Alexander. IEEE Software, 2003

392 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Elaborating security requirements by construction of intentional anti-models (2004, background): “A few proposals have been made recently for extending existing modeling notations to capture attacker features at requirements engineering time - notably, through misuse cases that complement UML use cases [40, 1].”
Engineering Automotive Software (2007, background): “intruder attempts, in a way that is modularizable with the rest of the system [3].”
DAG-based attack and defense modeling: Don't miss the forest for the attack trees (2013, background): “abuse cases of McDermott and Fox [180] and misuse cases of Sindre and Opdahl [268, 269, 271, 5, 270] which were later extended by Røstad in [244].”
A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements (2011, background): “Alexander [29] provides some example misuse cases, together with the corresponding (positive) use cases.”