Secured Requirement Specification Framework (SRSF)
Generally, software engineers are poorly trained to elicit, analyze and specify security requirements, often confusing them with the architectural security mechanisms that are traditionally used to fulfill them. One of the most ignored parts of a security-enhanced software development lifecycle is the security requirements engineering process. Security should begin at the requirements level and must cover both overt functional security and emergent characteristics. A critical review of literature on the attempts in this regard reveals that there is no standard framework or model available for delivering secured software requirement specification. This study presents a framework for the security requirement specification called Secured Requirement Specification Framework (SRSF), which is prescriptive in nature.
Copyright: © 2008 R.A. Khan and K. Mustafa. This is an open access article distributed under the terms of the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original author and source are credited.
- 2,320 Views
- 2,613 Downloads
- 2 Citations
- Software security
- security requirement
- risk analysis
- use cases
- abuse cases
- secure software development life cycle