How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Artificial Intelligence and Law Année : 2008

How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns

Résumé

Laws set requirements that force organizations to assess the security and privacy of their IT systems and impose them to implement minimal precautionary security measures. Several IT solutions (e.g., Privacy Enhancing Technologies, Access Control Infrastructure, etc.) have been proposed to address security and privacy issues. However, understanding why, and when such solutions have to be adopted is often unanswered because the answer comes only from a broader perspective, accounting for legal and organizational issues. Security engineers and legal experts should analyze the business goals of a company and its organizational structure and derive from there the points where security and privacy problems may arise and which solutions best fit such (legal) problems. The paper investigates the methodological support for capturing security and privacy requirements of a concrete health care provider.

Dates et versions

hal-01511068 , version 1 (20-04-2017)

Identifiants

Citer

Luca Compagna, Paul El Khoury, Alzbeta Krausovà, Fabio Massacci, Nicola Zannone. How to integrate legal requirements into a requirements engineering methodology for the development of security and privacy patterns. Artificial Intelligence and Law, 2008, 1, 17, pp.1-30. ⟨10.1007/s10506-008-9067-3⟩. ⟨hal-01511068⟩
174 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More