Applying a requirement engineering based approach to evaluate the security requirements engineering methodologies

Abstract

Considering the multitude of security requirements engineering methodologies available today, selecting a security requirement engineering methodology that fits the security engineering context becomes a promising task. In previous work, we outlined a generic evaluation methodology to elicit and evaluate the anticipated characteristics of a security requirements engineering methodology according to the stakeholders' working context. In this paper, we detail each step of our methodology using an example context of network security requirements engineering.