Grupo Alarcos · Conference paper · 2006
Applying a Security Requirements Engineering Process
Daniel Mellado Fernández, Eduardo Fernández-Medina Patón, Mario Piattini Velthuis
Nowadays, security solutions are mainly focused on providing security defences, instead of solving one of the main reasons for security problems that refers to an appropriate Information Systems (IS) design. In fact, requirements engineering often neglects enough attention to security concerns. In this paper it will be presented a case study of our proposal, called SREP (Security Requirements Engineering Process), which is a standard-centred process and a reuse-based approach which deals with the security requirements at the earlier stages of software development in a systematic and intuitive way by providing a security resources repository and by integrating the Common Criteria into the software development lifecycle. In brief, a case study is shown in this paper demonstrating how the security requirements for a security critical IS can be obtained in a guided and systematic way by applying SREP.
On the same topic
- 2006 SREP: A Proposal for Establishing Security Requirements for the Development of Secure Information Systems
- 2009 Automated Support for Security Requirements Engineering in Software Product Line Domain Engineering
- 2007 SREPPLine: Towards a Security Requirements Engineering Process for Software Product Lines
- 2008 Security Requirements Engineering Process for Software Product Lines: A Case Study