CAIRIS

An environment might represent a system operating at a particular time of day, or in a particular physical location. Environments encapsulate visible phenomena such as assets, tasks, personas, and attackers, as well as invisible phenomena, such as goals, vulnerabilities, and threats. Environments may be identified at any time, although these may not become apparent until carrying out contextual inquiry and observing how potential users reason about their context of use.

Adding a new environment

fig:EnvironmentDialog

On-the-fly environment creation

fig:NewEnvironmentDialog

Most artifacts in CAIRIS are situated in one or more environments. When creating or updating an artifact, it is usually possible to create a new environment on the fly by right-clicking on the environment list box in the artifact dialog and selecting the New button. This opens the New Environment dialog box. In this dialog, an environment name, short code and description can be entered. When the create button is selected, a new environment is added to the CAIRIS database, and added to the environment list for the artifact.

Environmental attribute inheritence

An artifact may be situated in one or more environments, but the differences between these environments may be slight. To reflect this, it is possible for an artifact to inherit properties from another environment. To do this, right-click on the artifact’s environment list box and select the Inherit Environment option. When prompted, select the environment to inherit from, followed by the environment to situated the artifact in. In most cases, the properties of the inherited environment will be duplicated in this newly situated environment. In the case of goals and obstacles, only the immediate refinement associations are retained when inheriting properties from an environment.