TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Analysis and Component-based Realization of Security Requirements T2 - 2008 Third International Conference on Availability, Reliability and Security N2 - We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example. KW - security requirement KW - requirements engineering KW - data security KW - computer science Y1 - 2008 UR - https://ieeexplore.ieee.org/document/4529338 SN - 978-0-7695-3102-1 U6 - https://doi.org/10.1109/ARES.2008.27 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 195 EP - 203 PB - IEEE CY - Barcelona ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Schmidt, Holger T1 - An Integrated Method for Pattern-Based Elicitation of Legal Requirements Applied to a Cloud Computing Example T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws. KW - law KW - security KW - requirements engineering KW - software architecture Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329218 SN - 978-0-7695-4775-6 U6 - https://doi.org/10.1109/ARES.2012.25 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 463 EP - 472 PB - IEEE CY - Prague ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Barthe, Gilles ED - Livshits, Benjamin ED - Scandariato, Riccardo T1 - Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches T2 - Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings KW - Security standards KW - requirements engineering KW - ISO27000 KW - ISO27001 KW - security Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28166-2_2 SN - 978-3-642-28165-5 U6 - https://doi.org/10.1007/978-3-642-28166-2_2 VL - LNCS, 7159 SP - 14 EP - 21 PB - Springer CY - Berlin, Heidelberg ER -