Security Requirements Engineering Approaches for IoT-Based Systems: A Comprehensive Review and Open Research Challenges
Fernando Antônio Aires Lins, Fábio Alves de Freitas, Obionor de Oliveira Nóbrega, George Valença · 2024
Using Security Requirements Engineering (SRE) approaches is a traditional procedure for incorporating security requirements in traditional systems. Considering environments based on the Internet of Things (IoT), the use of SRE is even more recommended, given the considerable number of distinct domains that exist in IoT and also the heterogeneity of devices and systems. However, in the current literature, there is a gap regarding in-depth studies or systematic reviews regarding the use of SREs in IoT environments. This paper presents a comprehensive review of security requirements engineering approaches that have been used for this purpose. This comprehensive review can support organizations choose which approach to adopt and which IoT security requirements to consider. Finally, these approaches are evaluated, and open research challenges are identified.