Security Requirements Engineering for Evolving Software Systems: A Survey

View Sample PDF

Author(s): Armstrong Nhlabatsi (The Open University, UK), Bashar Nuseibeh (Lero, Ireland & The Open University, UK)and Yijun Yu (The Open University, UK)
Copyright: 2012
Pages: 21
Source title: Security-Aware Systems Applications and Software Development Methods
Source Author(s)/Editor(s): Khaled M. Khan (Qatar University, Qatar)
DOI: 10.4018/978-1-4666-1580-9.ch007

Keywords: Computer Science & IT / Information Science Reference / Systems & Software Design / Systems and Software Engineering

Purchase

View Security Requirements Engineering for Evolving Software Systems: A Survey on the publisher's website for pricing and purchasing information.

Abstract

Long-lived software systems often undergo evolution over an extended period. Evolution of these systems is inevitable as they need to continue to satisfy changing business needs, new regulations and standards, and introduction of novel technologies. Such evolution may involve changes that add, remove, or modify features; or that migrate the system from one operating platform to another. These changes may result in requirements that were satisfied in a previous release of a system not being satisfied in subsequent versions. When evolutionary changes violate security requirements, a system may be left vulnerable to attacks. In this paper we review current approaches to security requirements engineering and conclude that they lack explicit support for managing the effects of software evolution. We then suggest that a cross fertilisation of the areas of software evolution and security engineering would address the problem of maintaining compliance to security requirements of software systems as they evolve.

The IRMA Community

Research IRM

Security Requirements Engineering for Evolving Software Systems: A Survey

Purchase

Abstract

Related Content

IRMA Sponsors