E-SCORE: A web-based tool for security requirements engineering - ENSTA Bretagne - École nationale supérieure de techniques avancées Bretagne
Article Dans Une Revue SoftwareX Année : 2024

E-SCORE: A web-based tool for security requirements engineering

Résumé

As digital systems continue to grow in popularity, they also become more vulnerable to various forms of attacks with various motives, including financial gain and political influence. In response, engineers must consider system security from the design phase. However, defining security requirements at this stage can be challenging. To address this challenge, we propose E-SCORE, a web-based tool that streamlines the security requirements engineering process. E-SCORE implements the SCORE (Security Criteria Ontology for security Requirements Engineering) (i) to suggest security mechanisms and additional criteria to enhance security coverage and (ii) to facilitate security analysis of the system. An example of banking system usage is provided. Through our approach, we could define ten additional security requirements for a single requirement. Therefore, E-SCORE offers a valuable resource for engineers to ensure the security of digital systems across various domains.

Dates et versions

hal-04581557 , version 1 (21-05-2024)

Identifiants

Citer

Hiba Hnaini, Raul Mazo, Joël Champeau, Paola Vallejo, Jose Galindo. E-SCORE: A web-based tool for security requirements engineering. SoftwareX, 2024, 26, pp.101704. ⟨10.1016/j.softx.2024.101704⟩. ⟨hal-04581557⟩
24 Consultations
0 Téléchargements

Altmetric

Partager

More