@inproceedings{BeckersFassbenderHeiseletal.2012, author = {Beckers, Kristian and Faßbender, Stephan and Heisel, Maritta and K{\"u}ster, Jan-Christoph and Schmidt, Holger}, title = {Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches}, series = {Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings}, volume = {LNCS, 7159}, booktitle = {Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings}, editor = {Barthe, Gilles and Livshits, Benjamin and Scandariato, Riccardo}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-28165-5}, doi = {10.1007/978-3-642-28166-2_2}, pages = {14 -- 21}, year = {2012}, language = {en} } @inproceedings{BeckersFassbenderHeiseletal.2012, author = {Beckers, Kristian and Faßbender, Stephan and Heisel, Maritta and Schmidt, Holger}, title = {Using Security Requirements Engineering Approaches to Support ISO 27001 Information Security Management Systems Development and Documentation}, series = {2012 Seventh International Conference on Availability, Reliability and Security}, booktitle = {2012 Seventh International Conference on Availability, Reliability and Security}, publisher = {IEEE}, address = {Prague}, isbn = {978-1-4673-2244-7}, doi = {10.1109/ARES.2012.35}, pages = {242 -- 248}, year = {2012}, abstract = {An ISO 27001 compliant information security management system is difficult to create, due to the the limited support for system development and documentation provided in the standard. We present a structured analysis of the documentation and development requirements in the ISO 27001 standard. Moreover, we investigate to what extent existing security requirements engineering approaches fulfill these requirements. We developed relations between these approaches and the ISO 27001 standard using a conceptual framework originally developed for comparing security requirements engineering methods. The relations include comparisons of important terms, techniques, and documentation artifacts. In addition, we show practical applications of our results.}, language = {en} } @inproceedings{BeckersEickerFassbenderetal.2012, author = {Beckers, Kristian and Eicker, Stefan and Faßbender, Stephan and Heisel, Maritta and Schmidt, Holger and Schwittek, Widura}, title = {Ontology-Based Identification of Research Gaps and Immature Research Areas}, series = {Multidisciplinary Research and Practice for Information Systems: IFIP WG 8.4, 8.9/TC 5 International Cross-Domain Conference and Workshop on Availability, Reliability, and Security, CD-ARES 2012, Prague, Czech Republic, August 20-24, 2012. Proceedings}, volume = {LNCS, 7465}, booktitle = {Multidisciplinary Research and Practice for Information Systems: IFIP WG 8.4, 8.9/TC 5 International Cross-Domain Conference and Workshop on Availability, Reliability, and Security, CD-ARES 2012, Prague, Czech Republic, August 20-24, 2012. Proceedings}, editor = {Quirchmayr, Gerald and Basl, Josef and You, Ilsun and Xu, Lida and Weippl, Edgar}, publisher = {Springer}, address = {Berlin, Heidelberg}, isbn = {978-3-642-32497-0}, issn = {1611-3349}, doi = {10.1007/978-3-642-32498-7_1}, pages = {1 -- 16}, year = {2012}, language = {en} }