Security and privacy requirements analysis within a social setting

By Lin Liu, E. Yu, John Mylopoulos. Proceedings. 11th IEEE International Requirements Engineering Conference, 2003., 2003

435 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Security Requirements Engineering: A Framework for Representation and Analysis (2008, methodology): “[53] describe a method of analyzing possible illicit use of a system, but omit the important initial step of identifying the security requirements of the system before attempting to identify their violations.”
A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements (2011, methodology): “[91] proposed a framework also using i* to deal with security and privacy requirements, which was inspired by the work of Yu and Cysneiros.”
On Non-Functional Requirements in Software Engineering (2009, positive): “Using the idea of label propagation, different types of analysis could be performed early on before committing to an architecture or to code, as seen in the exploration of security concerns [44], in visually choosing operationalizations [45], and in casting an i* model analysis as a SAT problem [46]”
Elaborating security requirements by construction of intentional anti-models (2004, background): “The work closest in spirit to ours is [28]; they propose an extension of the i* agent-based requirements engineering framework [8] to identify attackers, analyze vulnerabilities through agent dependency links and suggest countermeasures.”