Experiences in eliciting security requirements

CrossTalk

Volumn 19, Issue 12, 2006, Pages 14-19

  Mead, Nancy R ^a,b  

^a CERT   (United States)

^b SEI   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

REQUIREMENTS ELICITATION METHODS; SECURITY REQUIREMENTS; SECURITY REQUIREMENTS ELICITATION;

INDUSTRIAL MANAGEMENT; REQUIREMENTS ENGINEERING; SOCIETIES AND INSTITUTIONS;

SECURITY SYSTEMS;

EID: 33845342159     PISSN: None     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (13)

1. Chung, L., et al. Security Quality Requirements Engineering (SQUARE): Case Study Phase III. Pittsburgh, PA: SEI, CMU, 2006 〈www.sei.cmu.edu/ publications/documents/06.reports/06sr003.html〉.
2. Sindre, G., and A.L. Opdahl, "Eliciting Security Requirements by Misuse Cases." 37th International Conference on Technology of Object-Oriented Languages (Tools 37-Pacific 2000). Sydney, Australia, Nov. 20-23, 2000. Los Alamitos, CA: Institute of Electrical and Electronics Engineers Computer Society, 2000.
3. Checkland, P. Soft Systems Methodologyin Action. Ontario, Canada: John Wiley& Sons, 1990.
4. QFD Institute. "Frequently Asked Questions About QFD." 2005 〈www.qfdi.org/what_is_qfd/faqs_about_qfd.htm〉.
5. Christel, M., and K. Kang. Issues in Requirements Elicitation. Pittsburgh, PA: SEI, CMU, 1992 〈www.sei.cmu.edu/publications/documents/92. reports/92.tr.012.html〉.
6. Systems Designers Scientific. CORE The Method: User Manual. London, England: SD-Scicon, 1986.
7. Kunz, W., and H. Rittel. Issues as Elements of Information Systems. Berkeley: Institute of Urban and Regional Development, University of California, 1970 〈www.iurd.ced. berkeley.edu/pub/WP-131.pdf〉.
8. Wood, J., and D. Silver. Joint Application Development. 2nd ed. New York: John Wiley & Sons, 1995.
9. Kang, K.C., et al, Featute-Oriented Domain Analysis Feasibility Study. Pittsburgh, PA: SEI, CMU, 1990 〈www.sei.cmu.edu/publications/documents/90. reports/90.tr.021.html〉.
10. Schiffrin, D. Approaches to Discourse. Oxford, England: Blackwell Publishers Ltd, 1994.
11. Hubbard, R., Nancy R. Mead, and C. Schroeder. "An Assessment of the Relative Efficiency of a Facilitator-Driven Requirements Collection Process With Respect to the Conventional Interview Method," Proc. of the International Conference on Requirements Engineering. Los Alamitos, CA: IEEEComputer Society Press, 2000.
12. United States. Dept. of Homeland Security. BuildSecurityIn Portal. National Cyber Security Division 〈https://buildsecurityin.us-cert.gov/ 〉.
13. Mead, N.R., et al. Security Quality Requirements Engineering (SQUARE) Methodology. Pittsburgh, PA: SEI, CMU, 2005 〈www.sei.cmu.edu/publications/ documents/05.reports/05tr0.09.html〉.