Assuring Security through Attribute GSN

The NFR (Non Functional Requirements) framework was used to quantitatively evaluate software architectures. Assurance cases using GSN (Goal Structuring Notation) have not been applied to quantitatively evaluate software architectures. In this paper, GSN will be extended to define quantitative attributes for this purpose. Then, the architecture evaluation method based on the attributed GSN method will be proposed. A case study on a LAN device monitoring system is also shown to evaluate the usefulness of the proposed method.