Security Requirements as Code: Example from VeriDevOps Project

Khaled Ismaeel, Alexandr Naumchev, Andrey Sadovykh, Dragos Truscan, Eduard Paul Enoiu, Cristina Seceleanu

Forskningsoutput: Kapitel i bok/konferenshandlingKonferensbidragVetenskapligPeer review


This position paper presents and illustrates the concept of security requirements as code - a novel approach to security requirements specification. The aspiration to minimize code duplication and maximize its reuse has always been driving the evolution of software development approaches. Object-Oriented programming (OOP) takes these approaches to the state in which the resulting code conceptually maps to the problem that the code is supposed to solve. People nowadays start learning to program in the primary school. On the other hand, requirements engineers still heavily rely on natural language based techniques to specify requirements. The key idea of this paper is: artifacts produced by the requirements process should be treated as input to the regular object-oriented analysis. Therefore, the contribution of this paper is the presentation of the major concepts for the security requirements as the code method that is illustrated with a real industry example from the VeriDevOps project.

Titel på gästpublikationProceedings - 29th IEEE International Requirements Engineering Conference Workshops, REW 2021
RedaktörerTao Yue, Mehdi Mirakhorli
Antal sidor7
ISBN (elektroniskt)978-1-6654-1898-0
ISBN (tryckt)978-1-6654-1899-7
StatusPublicerad - 2021
MoE-publikationstypA4 Artikel i en konferenspublikation
EvenemangIEEE International Requirements Engineering Conference Workshops -
Varaktighet: 20 sep 202124 sep 2021


KonferensIEEE International Requirements Engineering Conference Workshops
Förkortad titelREW


Fördjupa i forskningsämnen för ”Security Requirements as Code: Example from VeriDevOps Project”. Tillsammans bildar de ett unikt fingeravtryck.

Citera det här