TY - JOUR A1 - Schmidt, Holger T1 - Threat and Risk-Driven Security Requirements Engineering T2 - International Journal of Mobile Computing and Multimedia Communications N2 - In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements. KW - security KW - security engineering Y1 - 2011 UR - https://opus4.kobv.de/opus4-hs-duesseldorf/frontdoor/index/index/docId/1516 SN - 1937-9412 VL - 3 IS - 1 SP - 35 EP - 50 PB - IGI Global ER -