Pattern-Based Confidentiality-Preserving Refinement

Abstract. We present an approach to security requirements engineering, which makes use of special kinds of problem frames that serve to structure, characterize, analyze, and solve software development problems in the area of software and system security. In this paper, we focus on confidentiality problems. We enhance previously published work by formal behavioral frame descriptions, which enable software engineers to unambiguously specify security requirements. Consequently, software engineers can prove that the envisaged solutions provide functional correctness and that the solutions fulfill the specified security requirements.

• Type: Conference
• Year: 2009
• Where: ESSOS
• Authors: Holger Schmidt
• Keywords: ESSOS 2009, Security Requirements, Security Requirements Engineering, Software Engineering, Software Engineers