文章基本信息

标题：Proposing Security Requirement Prioritization Framework
本地全文：下载
作者：Aayush Gulati ; Shalini Sharma ; Parshotam Mehmi 等
期刊名称：International Journal of Computer Science, Engineering and Applications (IJCSEA)
印刷版ISSN：2231-0088
电子版ISSN：2230-9616
出版年度：2012
卷号：2
期号：3
出版社：Academy & Industry Research Collaboration Center (AIRCC)
摘要：Security has always been a great concern for all software systems due to the increased incursion of the wireless devices in recent years. Generally software engineering processes tries to compel the security measures during the various design phases which results into an inefficient measure. So this calls for a new process of software engineering in which we would try to give a proper framework for integrating the security requirements with the SDLC, and in this requirement engineers must discover all the security requirements related to a particular system, so security requirement could be analyzed and simultaneously prioritized in one go. In this paper we will present a new technique for prioritizing these requirement based on the risk measurement techniques. The true security requirements should be easily identified as early as possible so that these could be systematically analyzed and then every architecture team can choose the most appropriate mechanism to implement them.isioned
关键词：Security Requirements; Threats; Vulnerabilities; Assets; Prioritization.