Security Requirements as Code: Example from VeriDevOps Project

Khaled Ismaeel, Alexandr Naumchev, Andrey Sadovykh, Dragos Truscan, Eduard Paul Enoiu, Cristina Seceleanu

Tutkimustuotos: Artikkeli kirjassa/raportissa/konferenssijulkaisussaKonferenssiartikkeliTieteellinenvertaisarvioitu


This position paper presents and illustrates the concept of security requirements as code - a novel approach to security requirements specification. The aspiration to minimize code duplication and maximize its reuse has always been driving the evolution of software development approaches. Object-Oriented programming (OOP) takes these approaches to the state in which the resulting code conceptually maps to the problem that the code is supposed to solve. People nowadays start learning to program in the primary school. On the other hand, requirements engineers still heavily rely on natural language based techniques to specify requirements. The key idea of this paper is: artifacts produced by the requirements process should be treated as input to the regular object-oriented analysis. Therefore, the contribution of this paper is the presentation of the major concepts for the security requirements as the code method that is illustrated with a real industry example from the VeriDevOps project.

OtsikkoProceedings - 29th IEEE International Requirements Engineering Conference Workshops, REW 2021
ToimittajatTao Yue, Mehdi Mirakhorli
ISBN (elektroninen)978-1-6654-1898-0
ISBN (painettu)978-1-6654-1899-7
DOI - pysyväislinkit
TilaJulkaistu - 2021
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisuussa
TapahtumaIEEE International Requirements Engineering Conference Workshops -
Kesto: 20 syyskuuta 202124 syyskuuta 2021


KonferenssiIEEE International Requirements Engineering Conference Workshops


Sukella tutkimusaiheisiin 'Security Requirements as Code: Example from VeriDevOps Project'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.