Refine
Year of publication
- 2012 (85) (remove)
Document Type
- Article (33)
- Conference Proceeding (30)
- Article trade magazine (9)
- Part of a Book (8)
- Workingpaper / Report (4)
- Book (1)
Language
- German (42)
- English (41)
- Multiple languages (1)
- Russian (1)
Has Fulltext
- no (85) (remove)
Keywords
- Forena (3)
- VSVR (3)
- Virtual (TV) Studio (3)
- Eigene Methodik (2)
- FHD (2)
- Kraft-Wärme-Kälte-Kopplung im Leistungsbereich von 10 kW (2)
- Querschnittsauswertung (2)
- law (2)
- requirements engineering (2)
- security (2)
Department/institution
- Fachbereich - Maschinenbau und Verfahrenstechnik (24)
- Fachbereich - Medien (24)
- Fachbereich - Sozial- & Kulturwissenschaften (16)
- Fachbereich - Architektur (7)
- Digitale Vernetzung und Informationssicherheit (6)
- Fachbereich - Elektro- & Informationstechnik (6)
- Creative Media Production and Entertainment Computing (5)
- Fachbereich - Wirtschaftswissenschaften (4)
- Campus IT (1)
- Digital Learning and Digital Literacy (1)
The discipline of engineering secure software and services brings together researchers and practitioners from software, services, and security engineering. This interdisciplinary community is fairly new, it is still not well integrated and is therefore confronted with differing perspectives, processes, methods, tools, vocabularies, and standards. We present a Common Body of Knowledge (CBK) to overcome the aforementioned problems. We capture use cases from research and practice to derive requirements for the CBK. Our CBK collects, integrates, and structures knowledge from the different disciplines based on an ontology that allows one to semantically enrich content to be able to query the CBK. The CBK heavily relies on user participation, making use of the Semantic MediaWiki as a platform to support collaborative writing. The ontology is complemented by a conceptual framework, consisting of concepts to structure the knowledge and to provide access to it, and a means to build a common terminology. We also present organizational factors covering dissemination and quality assurance.
An ISO 27001 compliant information security management system is difficult to create, due to the the limited support for system development and documentation provided in the standard. We present a structured analysis of the documentation and development requirements in the ISO 27001 standard. Moreover, we investigate to what extent existing security requirements engineering approaches fulfill these requirements. We developed relations between these approaches and the ISO 27001 standard using a conceptual framework originally developed for comparing security requirements engineering methods. The relations include comparisons of important terms, techniques, and documentation artifacts. In addition, we show practical applications of our results.