The Case for Functional Security Requirements: Deriving a Framework for Functional Security Requirements Engineering

摘要

The following paper investigates the integration of requirements engineering and security engineering concepts in search of an effective process for functional security requirements engineering. A particular focus is placed on the end goal of deriving assurance in the system's capabilities in the scope of a full lifecycle requirements engineering effort. The development of an integrated framework is supported by a review of current literature and sound principles of security and requirements engineering. The framework is presented in an incremental fashion, as a basic requirements engineering process is transformed into a requirements engineering process which considers functional security requirements at each phase.