A Review of Security Requirements Engineering Methods with Respect to Risk Analysis and Model-Driven Engineering - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2014

A Review of Security Requirements Engineering Methods with Respect to Risk Analysis and Model-Driven Engineering

Abstract

One of the most important aspects that help improve the quality and cost of secure information systems in their early stages of the development lifecycle is Security Requirements Engineering (SRE). However, obtaining such requirements is non-trivial. One domain dealing also with eliciting security requirements is Risk Analysis (RA). Therefore, we perform a review of SRE methods in order to analyse which ones are compatible with RA processes. Moreover, the transition from these early security requirements to security policies at later stages in the lifecycle is generally non-automatic, informal and incomplete. To deal with such issues, model-driven engineering (MDE) uses formal models and automatic model transformations. Therefore, we also review which SRE methods are compatible with MDE approaches. Consequently, our review is based on criteria derived partially from existing survey works, further enriched and specialized in order to evaluate the compatibility of SRE methods with the disciplines of RA and MDE. It summarizes the evidence regarding this issue so as to improve understanding and facilitate evaluating and selecting SRE methods.
Fichier principal
Vignette du fichier
978-3-319-10975-6_6_Chapter.pdf (199.95 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01403987 , version 1 (28-11-2016)

Licence

Attribution

Identifiers

Cite

Denisse Muñante, Vanea Chiprianov, Laurent Gallon, Philippe Aniorte. A Review of Security Requirements Engineering Methods with Respect to Risk Analysis and Model-Driven Engineering. International Cross-Domain Conference and Workshop on Availability, Reliability, and Security (CD-ARES), Sep 2014, Fribourg, Switzerland. pp.79-93, ⟨10.1007/978-3-319-10975-6_6⟩. ⟨hal-01403987⟩
97 View
1554 Download

Altmetric

Share

Gmail Facebook X LinkedIn More