@article{Schmidt2011, author = {Schmidt, Holger}, title = {Threat and Risk-Driven Security Requirements Engineering}, series = {International Journal of Mobile Computing and Multimedia Communications}, volume = {3}, journal = {International Journal of Mobile Computing and Multimedia Communications}, number = {1}, publisher = {IGI Global}, issn = {1937-9412}, doi = {10.4018/jmcmc.2011010103}, pages = {35 -- 50}, year = {2011}, abstract = {In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements.}, language = {en} }