Threat and Risk-Driven Security Requirements Engineering
- In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements.
| Author: | Holger Schmidt |
|---|---|
| Fachbereich/Einrichtung: | Hochschule Düsseldorf / Fachbereich - Medien |
| Hochschule Düsseldorf / Fachbereich - Medien / Digitale Vernetzung und Informationssicherheit​ | |
| Document Type: | Article |
| Year of Completion: | 2011 |
| Language of Publication: | English |
| Publisher: | IGI Global |
| Parent Title (English): | International Journal of Mobile Computing and Multimedia Communications |
| Volume: | 3 |
| Issue: | 1 |
| First Page: | 35 |
| Last Page: | 50 |
| DOI: | https://doi.org/10.4018/jmcmc.2011010103 |
| ISSN: | 1937-9412 |
| Tag: | security; security engineering |
| Dewey Decimal Classification: | 0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 000 Informatik, Informationswissenschaft, allgemeine Werke |
| Licence (German): | |
| Release Date: | 2018/10/11 |