How to Select a Security Requirements Method? A Comparative Study with Students and Practitioners

No abstract is available for this paper.

• Publication year

  2012

• Venue

  Nordic Conference on Secure IT Systems

• Publication date

  2012-10-31

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1007/978-3-642-34210-3_7
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Change patterns

  2014cited by this paper
• Reducing the Effort to Comprehend Risk Models: Text Labels Are Often Preferred Over Graphical Means

  2011cited by this paper
• A Guided Tour of the CORAS Method

  2011cited by this paper
• Change Patterns : Co-evolving Requirements and Architecture

  2010cited by this paper
• Experimental comparison of attack trees and misuse cases for security threat identification

  2009cited by this paper
• Recommended Security Controls for Federal Information Systems and Organizations

  2009cited by this paper
• A systematic mapping study on empirical evaluation of software requirements specifications techniques

  2009cited by this paper
• Security Requirements Engineering: A Framework for Representation and Analysis

  2008influential reference
• An Analysis of the Security Patterns Landscape

  2007cited by this paper
• Secure and dependable patterns in organizations: an empirical approach

  2007cited by this paper
• Open Web Application Security Project

  2006cited by this paper
• A graphical approach to risk identification, motivated by empirical investigations

  2006cited by this paper
• Recommended Security Controls for Federal Information Systems

  2005cited by this paper
• Modeling security requirements through ownership, permission and delegation

  2005cited by this paper
• Security quality requirements engineering (SQUARE) methodology

  2005cited by this paper
• Integrating Security and Systems Engineering: Towards the Modelling of Secure Information Systems

  2003influential reference
• UMLsec: Extending UML for Secure Systems Development

  2002cited by this paper
• ≪UML≫ 2002 — The Unified Modeling Language

  2002cited by this paper
• SecureUML: A UML-Based Modeling Language for Model-Driven Security

  2002cited by this paper
• Software-engineering research revisited

  1993cited by this paper

• How Do Practitioners Reason About Security Requirements? An Interview Study

  2024cites this paper
• Evaluating the understandability and user acceptance of Attack-Defense Trees: Original experiment and replication

  2024cites this paper
• A new, evidence-based, theory for knowledge reuse in security risk analysis

  2023cites this paper
• SECRS TEMPLATE TO AID NOVICE DEVELOPERS IN SECURITY REQUIREMENTS IDENTIFICATION AND DOCUMENTATION

  2022cites this paper
• Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels

  2018cites this paper
• No search allowed: what risk modeling notation to choose?

  2018cites this paper
• Assessing and improving the quality of security methodologies for distributed systems

  2018cites this paper
• The Battle for New York: A Case Study of Applied Digital Threat Modeling at the Enterprise Level

  2018cites this paper
• On the Equivalence Between Graphical and Tabular Representations for Security Risk Assessment

  2017cites this paper
• Systems-Theoretic Likelihood and Severity Analysis for Safety and Security Co-engineering

  2017cites this paper
• Model comprehension for security risk assessment: an empirical comparison of tabular vs. graphical representations

  2017influential citation
• Graphical vs. Tabular Notations for Risk Models: On the Role of Textual Labels and Complexity

  2017influential citation
• Security Risk Assessment Methods: An Evaluation Framework and Theoretical Model of the Criteria Behind Methods Success

  2016influential citation
• Towards Empirical Evaluation of Automated Risk Assessment Methods

  2016cites this paper
• Holistic Security Requirements Engineering for Socio-Technical Systems

  2016cites this paper
• Holistic security requirements analysis for socio-technical systems

  2016cites this paper
• Which security catalogue is better for novices?

  2015cites this paper
• Privacy Threats in Software Architectures

  2015cites this paper
• Investigating security threats in architectural context: Experimental evaluations of misuse case maps

  2015cites this paper
• An experiment on comparing textual vs. visual industrial methods for security risk assessment

  2014cites this paper
• Empirical evaluation of a privacy-focused threat modeling methodology

  2014cites this paper
• Empirical Assessment of Security Requirements and Architecture: Lessons Learned

  2014cites this paper
• How Does the UML Testing Profile Support Risk-Based Testing

  2014cites this paper
• Security triage: an industrial case study on the effectiveness of a lean methodology to identify security requirements

  2014cites this paper
• Network of Excellence Deliverable D2.4 Second Release of the Method and Tool Evaluation

  2013cites this paper
• An Experimental Comparison of Two Risk-Based Security Methods

  2013cites this paper
• D4.3 Part II: Engineering Secure Future Internet Services: A Research Manifesto and Agenda from the NESSoS Community: Final Release

  2013cites this paper
• Empirical Validation of Security Methods

  2013cites this paper
• A Bibliography of Papers in Lecture Notes in Computer Science (2012): Volumes 7650{7699

  2012cites this paper
• 2 Part II : Engineering Secure Future Internet Services : A Research Manifesto and Agenda from the NESSoS Community Network of Excellence

  2012cites this paper