Refining Security Requirement Elicitation from Business Processes using Method Engineering
Kurt Sandkuhl, Raimundas Matulevičius, Naved Ahmed, Mārīte Kirikova · Jonkoping University Library (Jönköping University) · 2015
A method defines a systematic process for problem solving including the required aids and resources. The transfer of method knowledge from the developers to other users requires a certain level of maturity and documentation of the method. Based on a method for security requirements elicitation from business processes (SREBP), we demonstrate how approaches from method engineering can be used to refine methods and improve transferability and maturity of method descriptions. The contributions of the paper are (1) to show how a component-based method view can be applied in method refinement, (2) the actual refinement process for SREBP integrating work procedure, cooperation principles and notation, and (3) initial experiences and lessons learned from refining SREBP.