Specifying reusable security requirements

Journal of Object Technology

Volumn 3, Issue 1, 2004, Pages 61-75

  Firesmith, Donald ^a  

^a Software Engineering Institute   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER HARDWARE; COMPUTER SYSTEM FIREWALLS; COMPUTER VIRUSES; CYBERNETICS; DATA ACQUISITION; DATA PRIVACY; HIERARCHICAL SYSTEMS; IDENTIFICATION (CONTROL SYSTEMS); PARAMETER ESTIMATION; PERSONNEL; PUBLIC POLICY; QUALITY ASSURANCE; RISK ASSESSMENT; SECURITY OF DATA;

REUSABLE TEMPLATES; SECURITY MECHANISM; SECURITY POLICY; SECURITY RISKS;

SOFTWARE ENGINEERING;

EID: 2942753973     PISSN: 16601769     EISSN: None     Source Type: Journal    
DOI: 10.5381/jot.2004.3.1.c6     Document Type: Review

References (13)

1. [Alexander 2001] Alexander, I. "Misuse Case Help to Elicit Nonfunctional Requirements", IEE CCEJ, 2001. Available at http://wwweasyweb.easynet.co.uk/~iany/consultancy/papers.htm
2. SM) Framework, Technical Report CMU/SEI-99-TR-017 (1999). Available at http://www.sei.cmu.edu/publications/documents/99.reports/99tr017/ 99tr017abstract.html
3. [Firesmith 2003a] OPEN Process Framework Website. Available at http://www.donald-firesmith.com/
4. [Firesmith 2003b] Firesmith, D.G. "Engineering Security Requirements," in Journal of Object Technology, vol. 2, no. 1, January-February 2003, pp. 53-68. http://www.jot.fm/issues/issue_2003_01/column6
5. [Firesmith 2003c] Firesmith, D.G. "Security Use Cases," in Journal of Object Technology vol. 2, no. 3, May-June 2003, pp. 53-64. http://www.jot.fm/issues/issue_2003_05/column6
6. [Firesmith 2003d] Firesmith, D.G. "Analyzing and Specifying Reusable Security Requirements," Eleventh International IEEE Conference on Requirements Engineering (RE'2003) Requirements for High-Availability Systems (RHAS'03) Workshop, Monterey, California, September 2003.
7. [IEEE 1992] IEEE Std 1061-1992, IEEE Standard for a Software Quality Metrics Methodology, 1992.
8. [ISO 2000a] ISO/IEC 9126-1, Software Engineering - Product Quality - Part 1: Quality Model, 2000.
9. [ISO 2000b] ISO/EEC 9126-2, Software Engineering - Product Quality - Part 2: External Metrics, 2000.
10. [Lamsweerde 2000] Axel van Lamsweerde and Emmanuel Letier, "Handling Obstacles in Goal-Oriented Requirements Engineering," IEEE Transactions on Software Engineering, Vol. 26, No. 10, October 2000, pp. 978-1005
11. [Sindre 2001] Sindre, G. and Opdahl, A. "Templates for Misuse Case Description," Seventh International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ'2001), (4-5 June 2001). http://www.ifi.uib.no/conf/refsq2001/papers/p25.pdf
12. [Stoneburner 1999] Stoneburner, Gary, CSPP- Guidance for COTS Security Protection Profiles, NISTIR 6462, National Institutes of Standards and Technology (NIST), U.S. Department of Commerce, (December 1999), B-4-7. Available at http://csrc.nist.gov/publications/nistir/index.html.
13. [Tulloch 2003] Mitch Tulloch, Microsoft Encyclopedia of Security, Microsoft, Redmond, Washington, 2003.