TY - JOUR A1 - Fabian, Benjamin A1 - Gürses, Seda A1 - Heisel, Maritta A1 - Santen, Thomas A1 - Schmidt, Holger T1 - A comparison of security requirements engineering methods JF - Requirements Engineering N2 - This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another. KW - security requirement KW - security requirement engineering KW - comparison KW - security Y1 - 2010 UR - https://link.springer.com/article/10.1007/s00766-009-0092-x U6 - https://doi.org/10.1007/s00766-009-0092-x SN - 0947-3602 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - 15 IS - 1 SP - 7 EP - 40 PB - Springer CY - Wiesbaden ER -