An aspect-oriented approach to relating security requirements and access control
Azadeh Alebrahim, Thein Than Tun, Yijun Yu, Maritta Heisel, Bashar Nuseibeh · Open Research Online (The Open University) · 2012
Abstract. Affecting multiple parts in software systems, security re-quirements often tangle with functional requirements. In order to sepa-rate crosscutting concerns and increase modularity, we propose to repre-sent security requirements as aspects that can be woven into functional requirements. Using problem frames to model the functional require-ments, weaving is achieved by composing the modules representing secu-rity aspects with the requirement models. Moreover, we provide guidance on how such security aspects are structured to implement a particular ac-cess control solution. As a result, such security aspects become reusable solution patterns to refine the structure of security-related problem. Key words: security requirement, aspect-oriented requirements engi-neering, security pattern, access control, problem frames 1