Towards a framework for pattern experimentation: Understanding empirical validity in requirements engineering patterns

Abstract

Despite the abundance of information security guidelines, system developers have difficulties implementing technical solutions that are reasonably secure. Security patterns are one possible solution to help developers reuse security knowledge. The challenge is that it takes experts to develop security patterns. To address this challenge, we need a framework to identify and assess patterns and pattern application practices that are accessible to non-experts. In this paper, we narrowly define what we mean by patterns by focusing on requirements patterns and the considerations that may inform how we identify and validate patterns for knowledge reuse. We motivate this discussion using examples from the requirements pattern literature and theory in cognitive psychology.

Managing security requirements patterns using feature diagram hierarchies

“…More recently, there has been substantial work on object-oriented design patterns [14], requirements patterns [9,15] and security patterns [10,12,16]. A security requirements pattern provides a software engineer with a reusable set of requirements to solve common security problems.…”