Reusing security requirements using an extended quality model

  • Authors:
  • Markus Luckey;Andrea Baumann;Daniel Méndez;Stefan Wagner

  • Affiliations:
  • University of Paderborn;Universität der Bundeswehr, München;Fernández, TU München;TU München

  • Venue:
  • Proceedings of the 2010 ICSE Workshop on Software Engineering for Secure Systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

A reoccurring problem in software engineering constitutes ensuring sufficient completeness of requirements specifications with economically justifiable efforts. Formulating precise quality requirements and especially security requirements is elaborate as they depend on many stakeholders and technological aspects that are often unclear in early project phases. Threats that may have a severe impact on the software product are sometimes not even known. One approach to tackle this situation is reusing quality requirements, because they are to a high degree similar in different software products. The effect can be higher quality while at the same time saving time and budget. Quality models are a way to explicitly specify quality. Based on activity-based quality models an approach for specifying reusable quality requirements in early project phases is proposed that also allows a direct derivation of suitable quality requirements for new projects. The applicability of this approach and the resulting reuse potential is investigated in a case study, which concentrates on the security requirements of six industrial projects.