Using templates to elicit implied security requirements from functional requirements - a controlled experiment
Maria Riaz, John Slankas, Jason King, Laurie A. Williams · 2014
Context: Security requirements for software systems can be challenging to identify and are often overlooked during the requirements engineering process. Existing functional requirements of a system can imply the need for security requirements. Systems having similar security objectives (e.g., confidentiality) often also share security requirements that can be captured in the form of reusable templates and instantiated in the context of a system to specify security requirements.