{"id":"https://openalex.org/W2050180747","doi":"https://doi.org/10.1109/empire.2014.6890114","title":"Security requirement elicitation techniques: The comparison of misuse cases and issue based information systems","display_name":"Security requirement elicitation techniques: The comparison of misuse cases and issue based information systems","publication_year":2014,"publication_date":"2014-08-01","ids":{"openalex":"https://openalex.org/W2050180747","doi":"https://doi.org/10.1109/empire.2014.6890114","mag":"2050180747"},"language":"en","primary_location":{"id":"doi:10.1109/empire.2014.6890114","doi":"https://doi.org/10.1109/empire.2014.6890114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/empire.2014.6890114","pdf_url":null,"source":{"id":"https://openalex.org/S7407107879","display_name":"IEEE International Workshop on Empirical Requirements Engineering (EmpiRE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE 4th International Workshop on Empirical Requirements Engineering (EmpiRE)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086446020","display_name":"Naveed Ikram","orcid":"https://orcid.org/0000-0002-3898-5277","observed_orcids":["https://orcid.org/0000-0002-3898-5277"]},"institutions":[{"id":"https://openalex.org/I195024194","display_name":"Riphah International University","ror":"https://ror.org/02kdm5630","country_code":"PK","type":"education","lineage":["https://openalex.org/I195024194"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Naveed Ikram","raw_affiliation_strings":["Ibn-e-Sina Empirical Software Engineering Lab, Riphah International University, Islamabad, Pakistan","Ibn-e-Sina Empirical Software Eng. Lab., Riphah Int. Univ., Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Engineering Lab, Riphah International University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I195024194"]},{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Eng. Lab., Riphah Int. Univ., Islamabad, Pakistan","institution_ids":["https://openalex.org/I195024194"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Surayya Siddiqui","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I121243025","display_name":"International Islamic University, Islamabad","ror":"https://ror.org/047w75g40","country_code":"PK","type":"education","lineage":["https://openalex.org/I121243025"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Surayya Siddiqui","raw_affiliation_strings":["Ibn-e-Sina Empirical Software Engineering Lab, International Islamic University, Islamabad, Pakistan","Ibn-e-Sina Empirical Software Eng. Lab., Int. Islamic Univ., Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Engineering Lab, International Islamic University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I121243025"]},{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Eng. Lab., Int. Islamic Univ., Islamabad, Pakistan","institution_ids":["https://openalex.org/I121243025"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045950263","display_name":"Naurin Farooq Khan","orcid":"https://orcid.org/0000-0001-9631-6517","observed_orcids":["https://orcid.org/0000-0001-9631-6517"]},"institutions":[{"id":"https://openalex.org/I195024194","display_name":"Riphah International University","ror":"https://ror.org/02kdm5630","country_code":"PK","type":"education","lineage":["https://openalex.org/I195024194"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Naurin Farooq Khan","raw_affiliation_strings":["Ibn-e-Sina Empirical Software Engineering Lab, Riphah International University, Islamabad, Pakistan","Ibn-e-Sina Empirical Software Eng. Lab., Riphah Int. Univ., Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Engineering Lab, Riphah International University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I195024194"]},{"raw_affiliation_string":"Ibn-e-Sina Empirical Software Eng. Lab., Riphah Int. Univ., Islamabad, Pakistan","institution_ids":["https://openalex.org/I195024194"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7148,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.66562919,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":87,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"36","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.8047000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.8047000169754028,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.10570000112056732,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.014700000174343586,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-requirements-elicitation","display_name":"security requirements elicitation","score":0.8629999756813049},{"id":"https://openalex.org/keywords/misuse-cases","display_name":"misuse cases","score":0.9649999737739563},{"id":"https://openalex.org/keywords/issue-based-information-systems","display_name":"issue-based information systems","score":0.8980000019073486},{"id":"https://openalex.org/keywords/security-objectives","display_name":"security objectives","score":0.7429999709129333},{"id":"https://openalex.org/keywords/method-comparison","display_name":"method comparison","score":0.5839999914169312},{"id":"https://openalex.org/keywords/controlled-experiments","display_name":"controlled experiments","score":0.4259999990463257},{"id":"https://openalex.org/keywords/learning-time","display_name":"learning time","score":0.4909999966621399},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.41100001335144043}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7458788156509399},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5582185983657837},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5500067472457886},{"id":"https://openalex.org/C2780767217","wikidata":"https://www.wikidata.org/wiki/Q5532421","display_name":"Generality","level":2,"score":0.4941299259662628},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.459030419588089},{"id":"https://openalex.org/C2780698032","wikidata":"https://www.wikidata.org/wiki/Q193833","display_name":"Ibis","level":2,"score":0.4536449909210205},{"id":"https://openalex.org/C45384764","wikidata":"https://www.wikidata.org/wiki/Q838667","display_name":"Requirements elicitation","level":4,"score":0.4392218291759491},{"id":"https://openalex.org/C72161134","wikidata":"https://www.wikidata.org/wiki/Q5421219","display_name":"Expert elicitation","level":2,"score":0.4183218777179718},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3875701427459717},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3618585765361786},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.33928462862968445},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.3327866792678833},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3205607831478119},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.13720032572746277},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.13035324215888977},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.10040849447250366},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10003283619880676},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/empire.2014.6890114","doi":"https://doi.org/10.1109/empire.2014.6890114","is_oa":false,"landing_page_url":"https://doi.org/10.1109/empire.2014.6890114","pdf_url":null,"source":{"id":"https://openalex.org/S7407107879","display_name":"IEEE International Workshop on Empirical Requirements Engineering (EmpiRE)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE 4th International Workshop on Empirical Requirements Engineering (EmpiRE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W32863488","https://openalex.org/W170287575","https://openalex.org/W242171001","https://openalex.org/W581083545","https://openalex.org/W1503250708","https://openalex.org/W1565758573","https://openalex.org/W1573234480","https://openalex.org/W1594948760","https://openalex.org/W1602688781","https://openalex.org/W2008681738","https://openalex.org/W2071125767","https://openalex.org/W2104682122","https://openalex.org/W2111695375","https://openalex.org/W2132832491","https://openalex.org/W2136117679","https://openalex.org/W2150326278","https://openalex.org/W2153334257","https://openalex.org/W2156221105","https://openalex.org/W3161918289","https://openalex.org/W6609183171","https://openalex.org/W6681821490"],"related_works":["https://openalex.org/W1190389589","https://openalex.org/W7112842004","https://openalex.org/W3161918289","https://openalex.org/W1174400383","https://openalex.org/W6998591993","https://openalex.org/W2071125767","https://openalex.org/W2148543034","https://openalex.org/W6989900849","https://openalex.org/W2152606579","https://openalex.org/W2055173670"],"abstract_inverted_index":{"There":[0],"are":[1],"myriads":[2],"of":[3,22,90,95,97,103,108,110,112,138,141,159,180,207],"security":[4,40,72,98,113,167,208],"elicitation":[5,41,209],"techniques":[6,42,92,105,223],"reported":[7],"in":[8,33,93,106,126,135,151,154,193,211],"the":[9,30,81,91,104,143,181,187,194,201,205],"literature,":[10],"but":[11],"their":[12],"industrial":[13],"adoption":[14],"is":[15,19,162,183],"inadequate.":[16],"Furthermore":[17],"there":[18],"a":[20,136,227],"shortage":[21],"empirical":[23],"and":[24,47,101,120,156,169,226],"comparative":[25],"evaluations":[26],"which":[27],"can":[28,217,229],"aid":[29],"software":[31,202],"industry":[32,203],"this":[34],"respect.":[35],"This":[36],"paper":[37],"compares":[38],"two":[39,82],"-":[43],"Misuse":[44],"cases":[45],"(MUC)":[46],"Issue":[48],"based":[49],"information":[50],"systems":[51],"(IBIS)":[52],"by":[53,123,173,220],"carrying":[54],"out":[55],"controlled":[56],"experiments.":[57],"A":[58],"2*2":[59],"factorial":[60],"design":[61],"was":[62,133,149],"used":[63],"with":[64],"30":[65],"undergraduate":[66,190],"students":[67,191],"selected":[68],"randomly":[69],"who":[70],"solved":[71],"goal":[73],"identification":[74],"tasks":[75],"on":[76],"an":[77],"individual":[78],"basis":[79],"using":[80],"techniques.":[83],"Two":[84],"dependent":[85],"variables":[86],"chosen":[87],"were;":[88],"effectiveness":[89],"terms":[94,107],"number":[96,109],"goals":[99,168],"identified":[100],"coverage":[102,172],"types":[111],"goals,":[114],"time":[115,144],"taken":[116,145],"to":[117,146,186],"learn,":[118],"execute":[119],"interpret":[121,147],"results":[122,148,182],"each":[124],"technique":[125,210],"three":[127,212],"different":[128,213],"situations.":[129,214],"The":[130,178,196,215],"main":[131],"finding":[132,166],"that":[134,189],"situation":[137],"low":[139],"level":[140,158],"detail,":[142],"lower":[150],"IBIS":[152],"while":[153],"medium":[155],"high":[157],"detail":[160],"MUC":[161],"more":[163],"effective":[164],"for":[165,200,224],"provides":[170,198],"better":[171],"taking":[174],"less":[175],"learning":[176],"time.":[177],"generality":[179],"limited":[184],"due":[185],"fact":[188],"participated":[192],"experiment.":[195],"study":[197,216],"guideline":[199],"about":[204],"choice":[206],"be":[218,230],"extended":[219],"adding":[221],"multiple":[222],"comparison":[225],"framework":[228],"developed.":[231]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}
