TY - CHAP A1 - Schmidt, Holger ED - Massacci, Fabio ED - Redwine Jr., Samuel T. ED - Zannone, Nicola T1 - Pattern-Based Confidentiality-Preserving Refinement T2 - Engineering Secure Software and Systems: First International Symposium ESSoS 2009, Leuven, Belgium, February 4-6, 2009. Proceedings KW - data transmission KW - security requirement KW - problem frame KW - adversary model KW - security requirement engineering Y1 - 2009 UR - https://link.springer.com/chapter/10.1007%2F978-3-642-00199-4_5 SN - 978-3-642-00198-7 U6 - https://doi.org/10.1007/978-3-642-00199-4_5 VL - LNCS, 5429 SP - 43 EP - 59 PB - Springer CY - Berlin, Heidelberg ER - TY - JOUR A1 - Fabian, Benjamin A1 - Gürses, Seda A1 - Heisel, Maritta A1 - Santen, Thomas A1 - Schmidt, Holger T1 - A comparison of security requirements engineering methods JF - Requirements Engineering N2 - This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another. KW - security requirement KW - security requirement engineering KW - comparison KW - security Y1 - 2010 UR - https://link.springer.com/article/10.1007/s00766-009-0092-x U6 - https://doi.org/10.1007/s00766-009-0092-x SN - 0947-3602 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - 15 IS - 1 SP - 7 EP - 40 PB - Springer CY - Wiesbaden ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Jürjens, Jan A1 - Schmidt, Holger ED - Giannakopoulou, Dimitra ED - Orejas, Fernando T1 - Systematic Development of UMLsec Design Models Based on Security Requirements T2 - Fundamental Approaches to Software Engineering: 14th International Conference, FASE 2011, Held as Part of the Joint European Conferences on Theory and Practice of Software, ETAPS 2011, Saarbrücken, Germany, March 26–April 3, 2011. Proceedings KW - security requirement KW - secquence diagram KW - eclipse modeling framework KW - patient monitoring system KW - security requirement engineering Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-19811-3_17 SN - 978-3-642-19810-6 U6 - https://doi.org/10.1007/978-3-642-19811-3_17 VL - LNCS, 6603 SP - 232 EP - 246 PB - Springer CY - Berlin, Heidelberg ER -