TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger ED - Müller, Günter T1 - Security Engineering Using Problem Frames T2 - Emerging Trends in Information and Communication Security: International Conference, ETRICS 2006, Freiburg, Germany, June 6-9, 2006. Proceeding KW - security requirement KW - problem frames KW - security problem KW - security engineering KW - sequence diagram Y1 - 2006 UR - https://link.springer.com/chapter/10.1007/11766155_17 SN - 978-3-540-34640-1 U6 - https://doi.org/10.1007/11766155_17 VL - LNCS, 3995 SP - 238 EP - 253 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - Analysis and Component-based Realization of Security Requirements T2 - 2008 Third International Conference on Availability, Reliability and Security N2 - We present a process to develop secure software with an extensive pattern-based security requirements engineering phase. It supports identifying and analyzing conflicts between different security requirements. In the design phase, we proceed by selecting security software components that achieve security requirements. The process enables software developers to systematically identify, analyze, and finally realize security requirements using security software components. We illustrate our approach by a lawyer agency software example. KW - security requirement KW - requirements engineering KW - data security KW - computer science Y1 - 2008 UR - https://ieeexplore.ieee.org/document/4529338 SN - 978-0-7695-3102-1 U6 - https://doi.org/10.1109/ARES.2008.27 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 195 EP - 203 PB - IEEE CY - Barcelona ER - TY - CHAP A1 - Schmidt, Holger ED - Massacci, Fabio ED - Redwine Jr., Samuel T. ED - Zannone, Nicola T1 - Pattern-Based Confidentiality-Preserving Refinement T2 - Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings KW - data transmission KW - security requirement KW - problem frame KW - adversary model KW - security requirement engineering Y1 - 2009 UR - https://link.springer.com/chapter/10.1007%2F978-3-642-00199-4_5 SN - 978-3-642-00198-7 U6 - https://doi.org/10.1007/978-3-642-00199-4_5 VL - LNCS, 5429 SP - 43 EP - 59 PB - Springer CY - Berlin, Heidelberg ER - TY - JOUR A1 - Fabian, Benjamin A1 - Gürses, Seda A1 - Heisel, Maritta A1 - Santen, Thomas A1 - Schmidt, Holger T1 - A comparison of security requirements engineering methods JF - Requirements Engineering N2 - This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another. KW - security requirement KW - security requirement engineering KW - comparison KW - security Y1 - 2010 UR - https://link.springer.com/article/10.1007/s00766-009-0092-x U6 - https://doi.org/10.1007/s00766-009-0092-x SN - 0947-3602 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - 15 IS - 1 SP - 7 EP - 40 PB - Springer CY - Wiesbaden ER - TY - CHAP A1 - Schmidt, Holger A1 - Jürjens, Jan ED - Mouratidis, Haralambos ED - Rolland, Colette T1 - Connecting Security Requirements Analysis and Secure Design Using Patterns and UMLsec T2 - Advanced Information Systems Engineering: 23rd International Conference, CAiSE 2011, London, UK, June 20-24, 2011. Proceedings KW - security requirement KW - secure design KW - architectual pattern Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21640-4_28 SN - 978-3-642-21639-8 U6 - https://doi.org/10.1007/978-3-642-21640-4_28 VL - LNCS, 6741 SP - 367 EP - 382 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Jürjens, Jan A1 - Marchal, Loïc A1 - Ochoa, Martín A1 - Schmidt, Holger ED - France, Robert B. ED - Kuester, Jochen M. ED - Bordbar, Behzad ED - Paige, Richard F. T1 - Incremental Security Verification for Evolving UMLsec models T2 - Modelling Foundations and Applications: 7th European Conference, ECMFA 2011, Birmingham, UK, June 6 - 9, 2011 Proceedings KW - model element KW - security requirement KW - class diagram KW - evolution path KW - security property Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21470-7_5 SN - 978-3-642-21469-1 U6 - https://doi.org/10.1007/978-3-642-21470-7_5 VL - LNCS, 6698 SP - 52 EP - 68 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Jürjens, Jan A1 - Schmidt, Holger ED - Giannakopoulou, Dimitra ED - Orejas, Fernando T1 - Systematic Development of UMLsec Design Models Based on Security Requirements T2 - Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings KW - security requirement KW - secquence diagram KW - eclipse modeling framework KW - patient monitoring system KW - security requirement engineering Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17 SN - 978-3-642-19810-6 U6 - https://doi.org/10.1007/978-3-642-19811-3_17 VL - LNCS, 6603 SP - 232 EP - 246 PB - Springer CY - Berlin, Heidelberg ER -