Threat and Risk-Driven Security Requirements Engineering

  • In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements.

Export metadata

Metadaten
Author:Holger Schmidt
Fachbereich/Einrichtung:Hochschule Düsseldorf / Fachbereich - Medien
Hochschule Düsseldorf / Fachbereich - Medien / Digitale Vernetzung und Informationssicherheit​
Document Type:Article
Year of Completion:2011
Language of Publication:English
Publisher:IGI Global
Parent Title (English):International Journal of Mobile Computing and Multimedia Communications
Volume:3
Issue:1
First Page:35
Last Page:50
DOI:https://doi.org/10.4018/jmcmc.2011010103
ISSN:1937-9412
Tag:security; security engineering
Dewey Decimal Classification:0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 000 Informatik, Informationswissenschaft, allgemeine Werke
Licence (German):keine Lizenz - nur Metadaten
Release Date:2018/10/11
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.