An Ontology Based Information Security Requirements Engineering Framework

Chikh, Azeddine; Abulaish, Muhammad; Nabi, Syed Irfan; Alghathbar, Khaled

doi:10.1007/978-3-642-22339-6_17

Cited by 10 publications

(6 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…A elicitação de requisitos é uma das partes mais difíceis e mais críticas do desenvolvimento de software (Li et al, 2011). Por isso, é preciso empenho para facilitar a sua validação e reutilização (Chikh et al, 2011). E, como todas as atividades podem influenciar na qualidade dos requisitos, este estudo considera a utilização de métricas que atuem na avaliação dos requisitos em qualquer momento do processo de desenvolvimento de produtos de TI, inclusive após a fase de levantamento de requisitos.…”

Section: Engenharia De Requisitosunclassified

“…Para implementar a rastreabilidade, é preciso uma estrutura semântica, com vocabulários específicos, contendo informação relevante e permitindo a interligação destas informações com o domínio (Chikh et al, 2011). Tal estrutura viabiliza a análise de consistência e completude, que, aliada ao uso de atributos de qualidade e técnicas de rastreabilidade automatizadas, podem eliminar conflitos e cooperação falsamente identificados de forma eficiente (Egyed & Grunbacher, 2004).…”

Section: Engenharia De Requisitosunclassified

“…Considerando que os requisitos são o foco da ER, é fundamental que haja uma compreensão clara do requisito em si e de como ele se relaciona com outros elementos . As tecnologias ontológicas provêm um meio eficiente para dar suporte a estas tarefas (Li et al, 2011), sendo cada vez maior o interesse pela aplicação de ontologias de domínio no âmbito da ER (Chikh et al, 2011).…”

Section: Ontologias E Engenharia De Requisitosunclassified

See 2 more Smart Citations

Elicitação de requisitos orientada por ontologias de domínio

Motta¹,

Ferneda²,

Campos³

et al. 2019

RGCTI

View full text Add to dashboard Cite

Levantamento de Requisitos é um processo dedicado a compreender as necessidades de clientes e usuários, e transformar estas necessidades em projetos de desenvolvimento de sistemas. Para capturar tais necessidades, o engenheiro de requisitos precisa interagir com pessoas de negócio das mais diversas áreas. Essa interação requer intensa comunicação e é bastante afetada pelas diferenças de vocabulário e interpretação que existe entre a equipe de negócio e a equipe de desenvolvedores do sistema. O uso de métodos de Arquitetura da Informação e de ontologias trazem novas alternativas para tratar tais problemas. O método de Arquitetura da Informação MAIA mostrou-se aderente ao Levantamento de Requisitos, possibilitando uma nova visão sobre o processo. Foram identificados estudos que abordam o uso de ontologias e do método MAIA que podem ser usados para apoiar o levantamento de requisitos. O objetivo principal deste trabalho é propor o modelo de Elicitação de Requisitos em Ciclos (ERC), criando uma nova abordagem para a especificação de sistemas, que garanta um documento de requisitos completo, consistente e não ambíguo, e que permita suporte automatizado de conteúdo. Esta abordagem é baseada em um conjunto de melhores práticas que visam melhorar o suporte a comunicação entre as equipes e, consequentemente, o processo de Levantamento de Requisitos como um todo.

show abstract

Section: Engenharia De Requisitosunclassified

Section: Ontologias E Engenharia De Requisitosunclassified

See 1 more Smart Citation

Elicitação de requisitos orientada por ontologias de domínio

Motta¹,

Ferneda²,

Campos³

et al. 2019

RGCTI

View full text Add to dashboard Cite

show abstract

“…The main objective of [13] is to amalgamate and extend the security ontologies proposed in Problem Frames and Secure Tropos. A. Chikh et al In [14] proposes a framework for building a part of Software Requirement Specification related to information security requirements using ontologies. Such a framework [14] allows ensuring information security requirements traceability and reuse.…”

Section: Related Workmentioning

confidence: 99%

“…A. Chikh et al In [14] proposes a framework for building a part of Software Requirement Specification related to information security requirements using ontologies. Such a framework [14] allows ensuring information security requirements traceability and reuse. Karyda et al [15] uses OWL to propose security ontology with which to develop secure applications.…”

Section: Related Workmentioning

confidence: 99%

A Knowledge-oriented Approach to Security Requirements for an E-Voting System

Salini¹,

Kanmani²

2012

IJCA

View full text Add to dashboard Cite

In this paper, we introduce a knowledge-oriented approach for the Security Requirements Engineering phase for developing E-Voting System. The knowledge acquired through the process of eliciting and analyzing secure E-Voting System is represented in the form of UML models; which can be made available to future developers and the dependency towards security experts can be reduced. In this paper we present a set of security requirements and security requirements patterns that were developed based on the aforementioned approach. Security requirements for modelling have been identified by following the Model Oriented Security Requirements Engineering framework for web applications. The security requirements have been designed into security requirements patterns for creating security requirements ontology for an E-Voting System. The ontology allows all concepts of importance and their relationships to be identified. The paper also compares the approach with other relevant methods in the Security Requirements Engineering phase for developing secure applications.

show abstract

Reusable knowledge in security requirements engineering: a systematic mapping study

et al. 2015

View full text Add to dashboard Cite

International audienceSecurity is a concern that must be taken into consideration starting from the early stages of system development. Over the last two decades, researchers and engineers have developed a considerable number of methods for security requirements engineering. Some of them rely on the (re)use of security knowledge. Despite some existing surveys about security requirements engineering , there is not yet any reference for researchers and practitioners that presents in a systematic way the existing proposals, techniques, and tools related to security knowledge reuse in security requirements engineering. The aim of this paper is to fill this gap by looking into drawing a picture of the literature on knowledge and reuse in security requirements engineering. The questions we address are related to methods, techniques, modeling frameworks, and tools for and by reuse in security requirements engineering. We address these questions through a systematic mapping study. The mapping study was a literature review conducted with the goal of identifying, analyzing, and categorizing state-of-the-art research on our topic. This mapping study analyzes more than thirty approaches, covering 20 years of research in security requirements engineering. The contributions can be summarized as follows: (1) A framework was defined for analyzing and comparing the different proposals as well as categorizing future contributions related to knowledge reuse and security requirements engineering; (2) the different forms of knowledge representation and reuse were identified; and (3) previous surveys were updated. We conclude that most methods should introduce more reusable knowledge to manage security requirements

show abstract

An Ontology Based Information Security Requirements Engineering Framework

Cited by 10 publications

References 6 publications

Elicitação de requisitos orientada por ontologias de domínio

Elicitação de requisitos orientada por ontologias de domínio

A Knowledge-oriented Approach to Security Requirements for an E-Voting System

Reusable knowledge in security requirements engineering: a systematic mapping study

Contact Info

Product

Resources

About