A Pattern System for Security Requirements Engineering

We present a pattern system for security requirements engineering, consisting of security problem frames and concretized security problem frames. These are special kinds of problem frames that serve to structure, characterize, analyze, and finally solve software development problems in the area of software and system security. We equip each frame with formal preconditions and postconditions. The analysis of these conditions results in a pattern system that explicitly shows the dependencies between the different frames. Moreover, we indicate related frames, which are commonly used together with the considered frame. Hence, our approach helps security engineers to avoid omissions and to cover all security requirements that are relevant for a given problem.

• Type: Conference
• Year: 2007
• Where: IEEEARES
• Authors: Denis Hatebur, Maritta Heisel, Holger Schmidt
• Keywords: IEEEARES 2007, Problem Frames, Security Privacy, Security Problem Frames, Security Requirements