%0 Conference Proceedings
%T A Review of Security Requirements Engineering Methods with Respect to Risk Analysis and Model-Driven Engineering
%+ Laboratoire Informatique de l'Université de Pau et des Pays de l'Adour (LIUPPA)
%A Muñante, Denisse
%A Chiprianov, Vanea
%A Gallon, Laurent
%A Aniorte, Philippe
%Z Part 1: Cross-Domain Conference and Workshop on Multidisciplinary Research and Practice for Information Systems (CD-ARES 2014): Software Security
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B International Cross-Domain Conference and Workshop on Availability, Reliability, and Security (CD-ARES)
%C Fribourg, Switzerland
%Y Stephanie Teufel
%Y Tjoa A Min
%Y Ilsun You
%Y Edgar Weippl
%I Springer
%3 Availability, Reliability, and Security in Information Systems
%V LNCS-8708
%P 79-93
%8 2014-09-08
%D 2014
%R 10.1007/978-3-319-10975-6_6
%K Security requirements engineering
%K risk analysis
%K model-driven engineering
%K review
%Z Computer Science [cs]
%Z Humanities and Social Sciences/Library and information sciencesConference papers
%X One of the most important aspects that help improve the quality and cost of secure information systems in their early stages of the development lifecycle is Security Requirements Engineering (SRE). However, obtaining such requirements is non-trivial. One domain dealing also with eliciting security requirements is Risk Analysis (RA). Therefore, we perform a review of SRE methods in order to analyse which ones are compatible with RA processes. Moreover, the transition from these early security requirements to security policies at later stages in the lifecycle is generally non-automatic, informal and incomplete. To deal with such issues, model-driven engineering (MDE) uses formal models and automatic model transformations. Therefore, we also review which SRE methods are compatible with MDE approaches. Consequently, our review is based on criteria derived partially from existing survey works, further enriched and specialized in order to evaluate the compatibility of SRE methods with the disciplines of RA and MDE. It summarizes the evidence regarding this issue so as to improve understanding and facilitate evaluating and selecting SRE methods.
%G English
%Z TC 5
%Z TC 8
%Z WG 8.4
%Z WG 8.9
%2 https://inria.hal.science/hal-01403987/document
%2 https://inria.hal.science/hal-01403987/file/978-3-319-10975-6_6_Chapter.pdf
%L hal-01403987
%U https://inria.hal.science/hal-01403987
%~ SHS
%~ UNIV-PAU
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-TC5
%~ IFIP-WG
%~ IFIP-TC8
%~ IFIP-LNCS-8708
%~ IFIP-CD-ARES
%~ IFIP-WG8-4
%~ IFIP-WG8-9
%~ LIUPPA
%~ UPPA-OA