Threat- and Risk-Analysis During Early Security Requirements Engineering
- We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements.
| Author: | Holger Schmidt |
|---|---|
| Fachbereich/Einrichtung: | Hochschule Düsseldorf / Fachbereich - Medien |
| Hochschule Düsseldorf / Fachbereich - Medien / Digitale Vernetzung und Informationssicherheit​ | |
| Document Type: | Conference Proceeding |
| Year of Completion: | 2010 |
| Language of Publication: | English |
| Publisher: | IEEE |
| Place of publication: | Krakow |
| Parent Title (English): | 2010 International Conference on Availability, Reliability and Security |
| First Page: | 188 |
| Last Page: | 195 |
| Related URL: | https://ieeexplore.ieee.org/document/5438095 |
| DOI: | https://doi.org/10.1109/ARES.2010.14 |
| ISBN: | 978-1-4244-5880-6 |
| Tag: | data security; risk analysis; security requirements engineering; software engineering |
| Licence (German): | |
| Release Date: | 2018/10/11 |