@inproceedings{Schmidt2010, author = {Schmidt, Holger}, title = {Threat- and Risk-Analysis During Early Security Requirements Engineering}, series = {2010 International Conference on Availability, Reliability and Security}, booktitle = {2010 International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Krakow}, isbn = {978-1-4244-5880-6}, doi = {10.1109/ARES.2010.14}, pages = {188 -- 195}, year = {2010}, abstract = {We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements.}, language = {en} }