Security requirements engineering: When anti-requirements hit the fan

Proceedings of the IEEE International Conference on Requirements Engineering

Volumn 2002-January, Issue , 2002, Pages 203-205

  Crook, Robert ^a   Ince, Darrel ^a   Lin, Luncheng ^a   Nuseibeh, Bashar ^a  

^a OPEN UNIVERSITY   (United Kingdom)

Author keywords

Access control; Availability; Bridges; Electrical equipment industry; Face detection; Information security; Information systems; Maintenance engineering; Privacy; Protection

Indexed keywords

ACCESS CONTROL; AVAILABILITY; DATA PRIVACY; ELECTRIC MACHINE CONTROL; FACE RECOGNITION; INFORMATION SYSTEMS; MAINTAINABILITY; REQUIREMENTS ENGINEERING; SECURITY OF DATA;

ANTI-REQUIREMENTS; ELECTRICAL EQUIPMENT; MICROSOFT; ORGANISATIONAL; PROTECTION; SECURITY REQUIREMENTS ENGINEERING; SOFTWARE PROJECT;

BRIDGES;

EID: 84948972584     PISSN: 1090705X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICRE.2002.1048527     Document Type: Conference Paper

References (20)

1. A. I. Anton and J. B. Earp, "Strategies for Developing Policies and Requirements for Secure Electronic Commerce Systems", Recent Advances in Secure and Private E-Commerce. Kluwer, 2001.
2. A. I. Anton, J. B., Earp, C. Potts and T. A. Alspaugh, "The Role of Policy and Stakeholder Privacy Values in Requirements Engineering", Proc. Symposium on Requirements Engineering for Information Security, 2001.
3. I. Alexander, "Misuse Cases", Proceedings of International Requirements Engineering Conference (RE'02), Germany, 2002.
4. R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, Wiley, 2001
5. D. Bell and L. J. La Padula, "Secure Computer Systems: A Mathematical Model", MITRE Technical Report 2547, Volume II. 1973.
6. BS799-1:1999 Information Security Management-Part 1: Code of Practice for Information Security. British Standards Institution, London. 1999.
7. D. D. Clark and D. R. Wilson, "A Comparison of Commercial and Military Computer Security Policies", Proc. of the 1987 IEEE Symposium on Security and Privacy, 1987.
8. L. Chung, "Dealing with Security Requirements During the Development of Information Systems", In Proc. CAiSE '93, 5th Int. Conf. Advanced Information Systems Engineering, Colette Rolland, Francois Bodart, Corine Cauvet (Eds.). Springer, 1993.
9. N. Damianou, N. Dulay, E. Lupu and M. Sloman, "Ponder, A Language for specifying Management and Security Policies for Distributed Systems", Imperial College Research Report DoC2001, Jan 2001.
10. T.F. Himdi and R.S. Sandhu, "Lattice-based Models for Controlled Sharing of Confidential Information in the Saudi Hajj system", Proceedings 13th IEEE Annual Computer Security Applications Conference. 1997.
11. Pierre Jean-Fontaine Goal Oriented Elaboration of Security Requirements. Project Dissertation. Universite Catholique de Louvain, Belgium, 2001.
12. J. McLean, "Security Models", Encyclopaedia of Software Engineering. Wiley, 1994.
13. J. McDermott and C. Fox, "Using Abuse Case Models for Security Requirements Analysis", Proceedings 15th IEEE Annual Computer Security Applications Conference. 1999.
14. J. D. Moffett, E. C. Lupu The Uses of Role Hierarchies in Access Control. Proceedings of the 4th ACM workshop on Role-based Access, 1999.
15. J. D. Moffett, "Requirements and Policies", Proc. Policy Workshop HP-Laboratories Bristol, UK, 1999.
16. R. Sandhu, E. Coyne, H. Feinstaein and C. Youmann, "Role Based Access Control Models" IEEE Computer, 29(2). 1996.
17. G. Sindre, and A. L. Opdahl, ?Templates for Misuse Case Description", Proceedings of the 7th International Workshop on Requirements Engineering, Foundation for Software Quality (REFSQ'2001), Switzerland, 4-5 June 2001.
18. R. K. Thomas and R. S. Sandhu, "Conceptual Foundations for a model of Task-based Authorizations", Proc. IEEE Computer Security Foundations Workshop VII, 1994.
19. A. van Lamsweerde and E. Letier, "Handling Obstacles in Goal-oriented Requirements Engineering", IEEE Transactions on Software Engineering, 26(10). 2000.
20. E. Yu and L. Liu, "Modelling Trust in the i∗ Strategic Actors Framework", Proc. of the 3rd Workshop on Deception, Fraud and Trust in Agent Societies, Barcelona, 3-4 June 2000.