Refine
Year of publication
- 2012 (85) (remove)
Document Type
- Article (33)
- Conference Proceeding (30)
- Article trade magazine (9)
- Part of a Book (8)
- Workingpaper / Report (4)
- Book (1)
Language
- German (42)
- English (41)
- Multiple languages (1)
- Russian (1)
Has Fulltext
- no (85) (remove)
Keywords
- Forena (3)
- VSVR (3)
- Virtual (TV) Studio (3)
- Eigene Methodik (2)
- FHD (2)
- Kraft-Wärme-Kälte-Kopplung im Leistungsbereich von 10 kW (2)
- Querschnittsauswertung (2)
- law (2)
- requirements engineering (2)
- security (2)
Department/institution
- Fachbereich - Maschinenbau und Verfahrenstechnik (24)
- Fachbereich - Medien (24)
- Fachbereich - Sozial- & Kulturwissenschaften (16)
- Fachbereich - Architektur (7)
- Digitale Vernetzung und Informationssicherheit (6)
- Fachbereich - Elektro- & Informationstechnik (6)
- Creative Media Production and Entertainment Computing (5)
- Fachbereich - Wirtschaftswissenschaften (4)
- Campus IT (1)
- Digital Learning and Digital Literacy (1)
The discipline of engineering secure software and services brings together researchers and practitioners from software, services, and security engineering. This interdisciplinary community is fairly new, it is still not well integrated and is therefore confronted with differing perspectives, processes, methods, tools, vocabularies, and standards. We present a Common Body of Knowledge (CBK) to overcome the aforementioned problems. We capture use cases from research and practice to derive requirements for the CBK. Our CBK collects, integrates, and structures knowledge from the different disciplines based on an ontology that allows one to semantically enrich content to be able to query the CBK. The CBK heavily relies on user participation, making use of the Semantic MediaWiki as a platform to support collaborative writing. The ontology is complemented by a conceptual framework, consisting of concepts to structure the knowledge and to provide access to it, and a means to build a common terminology. We also present organizational factors covering dissemination and quality assurance.
Considering legal aspects during software development is a challenging problem, due to the cross-disciplinary expertise required. The problem is even more complex for cloud computing systems, because of the international distribution, huge amounts of processed data, and a large number of stakeholders that own or process the data. Approaches exist to deal with parts of the problem, but they are isolated from each other. We present an integrated method for elicitation of legal requirements. A cloud computing online banking scenario illustrates the application of our methods. The running example deals with the problem of storing personal information in the cloud and based upon the BDSG (German Federal Data Protection Act). We describe the structure of the online banking cloud system using an existing pattern-based approach. The elicited information is further refined and processed into functional requirements for software development. Moreover, our method covers the analysis of security-relevant concepts such as assets and attackers particularly with regard to laws. The requirements artifacts then serve as inputs for existing patterns for the identification of laws relevant for the online banking cloud system. Finally, our method helps to systematically derive functional as well as security requirements that realize the previously identified laws.