TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Heisel, Maritta A1 - Küster, Jan-Christoph A1 - Schmidt, Holger ED - Barthe, Gilles ED - Livshits, Benjamin ED - Scandariato, Riccardo T1 - Supporting the Development and Documentation of ISO 27001 Information Security Management Systems through Security Requirements Engineering Approaches T2 - Engineering Secure Software and Systems: 4th International Symposium, ESSoS 2012, Eindhoven, The Netherlands, February, 16-17, 2012. Proceedings KW - Security standards KW - requirements engineering KW - ISO27000 KW - ISO27001 KW - security Y1 - 2012 UR - https://link.springer.com/chapter/10.1007/978-3-642-28166-2_2 SN - 978-3-642-28165-5 U6 - https://doi.org/10.1007/978-3-642-28166-2_2 VL - LNCS, 7159 SP - 14 EP - 21 PB - Springer CY - Berlin, Heidelberg ER - TY - CHAP A1 - Beckers, Kristian A1 - Faßbender, Stephan A1 - Schmidt, Holger T1 - An Integrated Method for Pattern-Based Elicitation of Legal Requirements Applied to a Cloud Computing Example T2 - 2012 Seventh International Conference on Availability, Reliability and Security N2 - Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws. KW - law KW - security KW - requirements engineering KW - software architecture Y1 - 2012 UR - https://ieeexplore.ieee.org/document/6329218 SN - 978-0-7695-4775-6 U6 - https://doi.org/10.1109/ARES.2012.25 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. SP - 463 EP - 472 PB - IEEE CY - Prague ER - TY - CHAP A1 - Schmidt, Holger A1 - Hatebur, Denis A1 - Heisel, Maritta ED - Mouratidis, Haralambos T1 - A Pattern-Based Method to Develop Secure Software T2 - Software Engineering for Secure Systems: Industrial and Research Perspectives N2 - The authors present a security engineering process based on security problem frames and concretized security problem frames. Both kinds of frames constitute patterns for analyzing security problems and associated solution approaches. They are arranged in a pattern system that makes dependencies between them explicit. The authors describe step-by-step how the pattern system can be used to analyze a given security problem and how solution approaches can be found. Afterwards, the security problems and the solution approaches are formally modeled in detail. The formal models serve to prove that the solution approaches are correct solutions to the security problems. Furthermore, the formal models of the solution approaches constitute a formal specification of the software to be developed. Then, the specification is implemented by generic security components and generic security architectures, which constitute architectural patterns. Finally, the generic security components and the generic security architecture that composes them are refined and the result is a secure software product built from existing and/or tailor-made security components. KW - security KW - problems Y1 - 2011 SN - 978-1-61520-837-1 U6 - https://doi.org/10.4018/978-1-61520-837-1.ch003 SP - 32 EP - 74 PB - IGI Global CY - Hershey ER - TY - CHAP A1 - Jürjens, Jan A1 - Ochoa, Martín A1 - Schmidt, Holger A1 - Marchal, Loïc A1 - Houmb, Siv Hilde A1 - Islam, Shareeful ED - Bernardo, Marco ED - Issarny, Valérie T1 - Modelling Secure Systems Evolution: Abstract and Concrete Change Specifications T2 - Formal Methods for Eternal Networked Software Systems: 11th International School on Formal Methods for the Design of Computer, Communication and Software Systems, SFM 2011, Bertinoro, Italy, June 13-18, 2011. Advanced Lectures N2 - Developing security-critical systems is difficult, and there are many well-known examples of vulnerabilities exploited in practice. In fact, there has recently been a lot of work on methods, techniques, and tools to improve this situation already at the system specification and design. However, security-critical systems are increasingly long-living and undergo evolution throughout their lifetime. Therefore, a secure software development approach that supports maintaining the needed levels of security even through later software evolution is highly desirable. In this chapter, we recall the UMLsec approach to model-based security and discuss on tools and techniques to model and verify evolution of UMLsec models. KW - software evolution KW - UMLsec KW - UMLseCH KW - security Y1 - 2011 UR - https://link.springer.com/chapter/10.1007/978-3-642-21455-4_15 SN - 978-3-642-21455-4 U6 - https://doi.org/10.1007/978-3-642-21455-4_15 VL - LNCS, 6659 SP - 504 EP - 526 PB - Springer CY - Berlin, Heidelberg ER - TY - JOUR A1 - Schmidt, Holger T1 - Threat and Risk-Driven Security Requirements Engineering JF - International Journal of Mobile Computing and Multimedia Communications N2 - In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements. KW - security KW - security engineering Y1 - 2011 U6 - https://doi.org/10.4018/jmcmc.2011010103 SN - 1937-9412 VL - 3 IS - 1 SP - 35 EP - 50 PB - IGI Global ER - TY - CHAP A1 - Heyman, Thomas A1 - Yskout, Koen A1 - Scandariato, Riccardo A1 - Schmidt, Holger A1 - Yu, Yijun ED - Erlingsson, Úlfar ED - Wieringa, Roel ED - Zannone, Nicola T1 - The Security Twin Peaks T2 - Engineering Secure Software and Systems: Third International Symposium, ESSoS 2011, Madrid, Spain, February 9-10, 2011. Proceedings KW - security KW - software architecture KW - requirements KW - patterns Y1 - 2011 UR - https://link.springer.com/book/10.1007/978-3-642-19125-1 SN - 978-3-642-19124-4 U6 - https://doi.org/10.1007/978-3-642-19125-1_13 VL - LNCS IS - 6542 SP - 167 EP - 180 PB - Springer CY - Berlin, Heidelberg ER - TY - JOUR A1 - Fabian, Benjamin A1 - Gürses, Seda A1 - Heisel, Maritta A1 - Santen, Thomas A1 - Schmidt, Holger T1 - A comparison of security requirements engineering methods JF - Requirements Engineering N2 - This paper presents a conceptual framework for security engineering, with a strong focus on security requirements elicitation and analysis. This conceptual framework establishes a clear-cut vocabulary and makes explicit the interrelations between the different concepts and notions used in security engineering. Further, we apply our conceptual framework to compare and evaluate current security requirements engineering approaches, such as the Common Criteria, Secure Tropos, SREP, MSRA, as well as methods based on UML and problem frames. We review these methods and assess them according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities. Finally, we discuss how these methods are related to the conceptual framework and to one another. KW - security requirement KW - security requirement engineering KW - comparison KW - security Y1 - 2010 UR - https://link.springer.com/article/10.1007/s00766-009-0092-x U6 - https://doi.org/10.1007/s00766-009-0092-x SN - 0947-3602 N1 - Sie haben Zugriff auf den Volltext innerhalb des HSD Campus. VL - 15 IS - 1 SP - 7 EP - 40 PB - Springer CY - Wiesbaden ER - TY - CHAP A1 - Hatebur, Denis A1 - Heisel, Maritta A1 - Schmidt, Holger T1 - A Pattern System for Security Requirements Engineering T2 - The Second International Conference on Availability, Reliability and Security (ARES'07) N2 - We present a pattern system/or security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem. KW - pattern system KW - system security KW - security KW - software development KW - computer security Y1 - 2007 UR - https://ieeexplore.ieee.org/abstract/document/4159824 SN - 0-7695-2775-2 U6 - https://doi.org/10.1109/ARES.2007.12 PB - IEEE CY - Vienna ER -