A Requirements Engineering-based Approach for evaluating Security Requirements Engineering Methodologies - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

A Requirements Engineering-based Approach for evaluating Security Requirements Engineering Methodologies

Résumé

The significance of security requirements in building safety and security critical systems is widely acknowledged. However, given the multitude of security requirements engineering methodologies that exists today, selecting the best suitable methodology remains challenging. In a previous work, we proposed a generic evaluation methodology to elicit and evaluate the anticipated characteristics of a security requirements engineering methodology with regards to the stakeholders' working context. In this article, we provide the empirical evaluation of three security requirements engineering methodologies KAOS, STS and SEPP with respect to the evaluation criteria elicited for network SRE context. The study show that none of them provide good support to derive network security requirements.
Fichier principal
Vignette du fichier
bulusu_22161.pdf (1.77 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03623154 , version 1 (29-03-2022)

Identifiants

  • HAL Id : hal-03623154 , version 1
  • OATAO : 22161

Citer

Sravani Teja Bulusu, Romain Laborde, Ahmad Samer Wazan, François Barrère, Abdelmalek Benzekri. A Requirements Engineering-based Approach for evaluating Security Requirements Engineering Methodologies. 15th International Conference on Information Technology : New Generations (ITNG 2018), Apr 2018, Las Vegas, United States. pp.517-525. ⟨hal-03623154⟩
4 Consultations
8 Téléchargements

Partager

Gmail Facebook X LinkedIn More