Eliciting Security Requirements of IoT Applications using Essential Use Case
Asma Asdayana Ibrahim · International Journal of Information Systems and Computer Sciences · 2019
Requirement elicitation is important to ensure correct requirements are elicit for application development.Wrong elicitation decision leads to a software failure.The most common challenges task is to ensure consistent requirements are elicit between engineers and the users.Most requirements engineers face difficulties to fulfill the consistency with clients especially in eliciting IoT security requirements as it involves many components such as devices, domains and security attributes.Addition to this, the engineers also need to have security knowledge and understand the background and standard related to security for the business requirements.These constraints resulted to eliciting poor quality security requirements that leads to insecure application development.In this paper, we propose our elicitation approach for security requirements by using Essential Use Cases (EUCs) and describe an example usage of eliciting security requirements for Internet of Thing (IoT) applications by using an Essential Use Case (EUC).It is found that EUCs to enhance the process of eliciting security requirements to produce accurate and complete security requirements for IoT applications.