Core Security Requirements Artefacts

摘要: Although security requirements engineering has recently attracted increasing attention, it lacked a context in which to operate. A number of papers have described how may be violated, but apart from few hints the general literature, none satisfactorily what are. This paper proposes framework core artefacts, unifies concepts two disciplines and engineering. From takes concept functional goals, are operationalised into requirements, with appropriate constraints. assets, together threats harm those assets. Security goals aim protect threats, take form constraints on requirements. In addition we explore consequences fact that is concerned protection while computers only provide interfaces. We show specify relationship between specification software behaviour, using Jackson's Problem Frames approach.