TY - CONF A1 - Schmidt, Holger T1 - Threat- and Risk-Analysis During Early Security Requirements Engineering T2 - 2010 International Conference on Availability, Reliability and Security N2 - We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements. KW - risk analysis KW - data security KW - security requirements engineering KW - software engineering Y1 - 2010 UR - https://opus4.kobv.de/opus4-hs-duesseldorf/frontdoor/index/index/docId/1530 UR - https://ieeexplore.ieee.org/document/5438095 SN - 978-1-4244-5880-6 SP - 188 EP - 195 PB - IEEE CY - Krakow ER -