Refine
Year of publication
- 2010 (1)
Document Type
Language
- English (1)
Has Fulltext
- no (1)
Is part of the Bibliography
- no (1)
Keywords
- risk analysis (1) (remove)
Department/institution
We present a threat and risk-driven methodology to security requirements engineering. Our approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. This security-relevant knowledge is used to assess the adequacy of security mechanisms, which are selected to establish security requirements.