TY - JOUR A1 - Schmidt, Holger T1 - Threat and Risk-Driven Security Requirements Engineering JF - International Journal of Mobile Computing and Multimedia Communications N2 - In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements. KW - security KW - security engineering Y1 - 2011 U6 - https://doi.org/10.4018/jmcmc.2011010103 SN - 1937-9412 VL - 3 IS - 1 SP - 35 EP - 50 PB - IGI Global ER -