Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
The Enterprise Model Frame for Supporting Security Requirement Elicitation from Business Processes
Riga Technical University, Latvia.
University of Tartu, Estonia.
Jönköping University, School of Engineering, JTH, Computer Science and Informatics. Jönköping University, School of Engineering, JTH. Research area Computer Science and Informatics. University of Rostock, Germany. (Information Engineering)
2016 (English)In: 12th International Baltic Conference, DB&IS 2016, July 4-6, 2016. / [ed] Guntis Arnicans, Vineta Arnicane, Juris Borzovs, Laila Niedrite, Springer, 2016, Vol. 615, 229-241 p.Conference paper (Refereed)
Abstract [en]

It is generally accepted that security requirements have to be elicited as early as possible to avoid later rework in the systems development process. One of the reasons for difficulties of early detection of security requirements is the complexity of security requirements identification. In this paper we propose an extension of the method for security requirements elicitation from business processes (SREBP). The extension includes the application of the enterprise model frame to capture enterprise views and relationships of the analysed system assets. Although the proposal was used in some practical settings, the main goal of this work is conceptual discussion of the proposal. Our study shows that (i) the enterprise model frame covers practically all concepts of the information security related definitions, and that (ii) the use of the frame with the SREBP method complies with the common enterprise modeling and enterprise architecture approaches.

Place, publisher, year, edition, pages
Springer, 2016. Vol. 615, 229-241 p.
Series
Communications in Computer and Information Science, ISSN 1865-0929
Keyword [en]
Security requirements elicitation, Business process models, Enterprise modeling
National Category
Information Systems
Identifiers
URN: urn:nbn:se:hj:diva-34922DOI: 10.1007/978-3-319-40180-5_16ISI: 000389806000016ScopusID: 2-s2.0-84978945252ISBN: 978-3-319-40179-9 (print)ISBN: 978-3-319-40180-5 (electronic)OAI: oai:DiVA.org:hj-34922DiVA: diva2:1070536
Conference
Databases and Information Systems, DB&IS
Available from: 2017-02-01 Created: 2017-01-31 Last updated: 2017-02-16Bibliographically approved

Open Access in DiVA

No full text

Other links

Publisher's full textScopus

Search in DiVA

By author/editor
Sandkuhl, Kurt
By organisation
JTH, Computer Science and InformaticsJTH. Research area Computer Science and Informatics
Information Systems

Search outside of DiVA

GoogleGoogle Scholar

Altmetric score

Total: 8 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf