Contextualizing security goals: A method for multilateral security requirements elicitation
Seda F. Gürses, Thomas Santen · 2006
Abstract: In networked environments, the importance of eliciting security require-ments as part of the process of requirements elicitation is increasing. Yet, it is difcult to articulate what security requirements are and how they can be elicited and imple-mented in the system. Few security requirements elicitation methods deal with the security needs of the end-users in specic contexts towards other end-users of the sys-tem who may or may not be malicious. Often the affects of the users ' social as well as functional roles on their security interests are disregarded. The goal of this paper is to attend to these problems by introducing a method that integrates the process of elic-iting security requirements of the end-users into the requirements elicitation process of a multilaterally secure system. Throughout the method emphasis is put on contex-tualizing security goals by analyzing the different viewpoints: whose security goal is