Using the AMAN-DA method to generate security requirements: a case study in the maritime domain

Vista sencilla de ítem
dc.citation.journalTitleREQUIREMENTS ENGINEERINGeng
dc.contributor.authorSouag A.
dc.contributor.authorMazo R.
dc.contributor.authorSalinesi C.
dc.contributor.authorComyn-Wattiau I.
dc.contributor.departmentUniversidad EAFIT. Departamento de Ingeniería de Sistemasspa
dc.contributor.researchgroupI+D+I en Tecnologías de la Información y las Comunicacionesspa
dc.creatorSouag A.
dc.creatorMazo R.
dc.creatorSalinesi C.
dc.creatorComyn-Wattiau I.
dc.date.accessioned2021-04-12T20:55:47Z
dc.date.available2021-04-12T20:55:47Z
dc.date.issued2018-11-01
dc.description.abstractSecurity requirements are known to be “the most difficult of requirements types” and potentially the ones causing the greatest risk if they are not correct. One approach to requirements elicitation is based on the reuse of explicit knowledge. AMAN-DA is a requirement elicitation method that reuses encapsulated knowledge in security and domain ontologies to produce security requirements specifications. The main research question addressed in this paper is to what extent is AMAN-DA able to generate domain-specific security requirements? Following a well-documented process, a case study related to the maritime domain was undertaken with the goal to demonstrate the utility and effectiveness of AMAN-DA for the elicitation and analysis of domain-specific security requirements. The usefulness of the method was also evaluated with a group of 12 experts. The paper demonstrates the elicitation of domain-specific security requirements by presenting the AMAN-DA method and its application. It describes the evaluation and reports some significant results and their implications for practice and future research, especially for the field of knowledge reuse in requirements engineering. © 2017, Springer-Verlag London Ltd.eng
dc.identifierhttps://eafit.fundanetsuite.com/Publicaciones/ProdCientif/PublicacionFrw.aspx?id=7522
dc.identifier.doi10.1007/s00766-017-0279-5
dc.identifier.issn09473602
dc.identifier.issn1432010X
dc.identifier.otherWOS;000444417400006
dc.identifier.otherSCOPUS;2-s2.0-85029753034
dc.identifier.urihttp://hdl.handle.net/10784/28616
dc.language.isoengeng
dc.publisherLondon : Springer-Verlag
dc.relationDOI;10.1007/s00766-017-0279-5
dc.relationWOS;000444417400006
dc.relationSCOPUS;2-s2.0-85029753034
dc.relation.urihttps://www.scopus.com/inward/record.uri?eid=2-s2.0-85029753034&doi=10.1007%2fs00766-017-0279-5&partnerID=40&md5=4e3c2be3c008fa2efe12234d8751cb4b
dc.rightshttps://v2.sherpa.ac.uk/id/publication/issn/0947-3602
dc.sourceREQUIREMENTS ENGINEERING
dc.subjectCryptographyeng
dc.subjectOntologyeng
dc.subjectRequirements engineeringeng
dc.subjectDomaineng
dc.subjectDomain ontologieseng
dc.subjectExplicit knowledgeeng
dc.subjectRequirement elicitationeng
dc.subjectRequirements elicitationeng
dc.subjectResearch questionseng
dc.subjectSecurityeng
dc.subjectSecurity requirementseng
dc.subjectKnowledge managementeng
dc.titleUsing the AMAN-DA method to generate security requirements: a case study in the maritime domaineng
dc.typeinfo:eu-repo/semantics/articleeng
dc.typearticleeng
dc.typeinfo:eu-repo/semantics/publishedVersioneng
dc.typepublishedVersioneng
dc.type.localArtículospa

Archivos

Bloque original
Mostrando 1 - 1 de 1
No hay miniatura disponible
Nombre:
s00766-017-0279-5.pdf
Tamaño:
4.88 MB
Formato:
Adobe Portable Document Format
Descripción:
Descargar

Colecciones

Artículos (GIDITIC)