Article
Refine
Year of publication
- 2011 (1)
Document Type
- Article (1) (remove)
Language
- English (1)
Has Fulltext
- no (1)
Is part of the Bibliography
- no (1)
Keywords
- security engineering (1) (remove)
Department/institution
- Fachbereich - Medien (1) (remove)
In this paper, the author aim to present a threat and risk-driven methodology to security requirements engineering. The chosen approach has a strong focus on gathering, modeling, and analyzing the environment in which a secure ICT-system to be built is located. The knowledge about the environment comprises threat and risk models. As presented in the paper, this security-relevant knowledge is used to assess the adequacy of security mechanisms, which are then selected to establish security requirements.