{"id":"https://openalex.org/W3173083343","doi":null,"title":"On Software Security Requirements Elicitation and Analysis Methods","display_name":"On Software Security Requirements Elicitation and Analysis Methods","publication_year":2021,"publication_date":"2021-05-05","ids":{"openalex":"https://openalex.org/W3173083343","mag":"3173083343"},"language":"en","primary_location":{"id":"mag:3173083343","doi":null,"is_oa":false,"landing_page_url":"https://it-in-industry.com/issue/archive/115.html","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"INFORMATION TECHNOLOGY IN INDUSTRY","raw_type":null},"volume":null,"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007753307","display_name":"Javed Ahmad","orcid":"https://orcid.org/0000-0003-2664-0316","observed_orcids":["https://orcid.org/0000-0003-2664-0316"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Javed Ahmad","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-2664-0316","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109385983","display_name":"Chaudhary Wali Mohammad","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chaudhary Wali Mohammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5083364474","display_name":"Mohd Sadiq","orcid":"https://orcid.org/0000-0002-6491-5221","observed_orcids":["https://orcid.org/0000-0002-6491-5221"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mohd Sadiq","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-6491-5221","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.226,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.62379844,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"9","issue":"1","first_page":"24","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9541000127792358,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9541000127792358,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.01209999993443489,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.008299999870359898,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-requirements-elicitation","display_name":"security requirements elicitation","score":0.9179999828338623},{"id":"https://openalex.org/keywords/security-requirements-analysis","display_name":"security requirements analysis","score":0.9290000200271606},{"id":"https://openalex.org/keywords/stakeholder-engagement","display_name":"stakeholder engagement","score":0.8500000238418579},{"id":"https://openalex.org/keywords/fuzzy-requirements","display_name":"fuzzy requirements","score":0.7429999709129333},{"id":"https://openalex.org/keywords/software-security","display_name":"software security","score":0.3930000066757202},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"requirements engineering","score":0.5559999942779541}],"concepts":[{"id":"https://openalex.org/C45384764","wikidata":"https://www.wikidata.org/wiki/Q838667","display_name":"Requirements elicitation","level":4,"score":0.8510043621063232},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.6241901516914368},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6079007387161255},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5825191140174866},{"id":"https://openalex.org/C173577280","wikidata":"https://www.wikidata.org/wiki/Q530038","display_name":"Requirements management","level":4,"score":0.5736954212188721},{"id":"https://openalex.org/C130505052","wikidata":"https://www.wikidata.org/wiki/Q7314872","display_name":"Requirement prioritization","level":5,"score":0.5441568493843079},{"id":"https://openalex.org/C135475081","wikidata":"https://www.wikidata.org/wiki/Q774228","display_name":"Requirement","level":4,"score":0.5379462838172913},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.5069096684455872},{"id":"https://openalex.org/C54534927","wikidata":"https://www.wikidata.org/wiki/Q4462275","display_name":"Software requirements","level":5,"score":0.4980161190032959},{"id":"https://openalex.org/C72161134","wikidata":"https://www.wikidata.org/wiki/Q5421219","display_name":"Expert elicitation","level":2,"score":0.48947346210479736},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.4341374933719635},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4300896227359772},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.42911627888679504},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3793458342552185},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3786928653717041},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.37858742475509644},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3769151568412781},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3267487585544586},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.30666351318359375},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2996428608894348},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.21137326955795288},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.20475652813911438},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.11337646842002869},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:3173083343","doi":null,"is_oa":false,"landing_page_url":"https://it-in-industry.com/issue/archive/115.html","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"INFORMATION TECHNOLOGY IN INDUSTRY","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W95723165","https://openalex.org/W1551592336","https://openalex.org/W1552489700","https://openalex.org/W1604301660","https://openalex.org/W1674247793","https://openalex.org/W1687881942","https://openalex.org/W1902449089","https://openalex.org/W1968060304","https://openalex.org/W1987380569","https://openalex.org/W1990288590","https://openalex.org/W1992459044","https://openalex.org/W2007359639","https://openalex.org/W2013238834","https://openalex.org/W2030015318","https://openalex.org/W2035268221","https://openalex.org/W2050180747","https://openalex.org/W2071125767","https://openalex.org/W2089504470","https://openalex.org/W2098209302","https://openalex.org/W2106326663","https://openalex.org/W2124503071","https://openalex.org/W2131730994","https://openalex.org/W2146863076","https://openalex.org/W2170954067","https://openalex.org/W2606280771","https://openalex.org/W2901971672","https://openalex.org/W2954078567"],"related_works":["https://openalex.org/W2157135788","https://openalex.org/W1988225931","https://openalex.org/W2375023814","https://openalex.org/W1651643609","https://openalex.org/W101349460","https://openalex.org/W2784481445","https://openalex.org/W4403106050","https://openalex.org/W1174400383","https://openalex.org/W2013238834","https://openalex.org/W3153864189"],"abstract_inverted_index":{"Security":[0,80],"requirements":[1,20,53,57,61,100,112],"play":[2],"an":[3],"important":[4],"role":[5],"to":[6,35,75],"protect":[7],"valuable":[8],"data":[9],"and":[10,83,107,115],"information":[11,40],"from":[12],"unauthorized":[13],"users.":[14],"The":[15,69],"elicitation":[16,49],"of":[17,25,50,71,97,109],"the":[18,22,26,32,38,48,51,77,89,98,110,126,131],"security":[19,52,56,111],"in":[21,121],"early":[23],"phase":[24],"software":[27,33,59,79],"development":[28],"process":[29],"can":[30],"help":[31],"engineers":[34],"successfully":[36],"develop":[37],"secure":[39],"system.":[41],"Different":[42],"methods":[43,86],"have":[44],"been":[45],"developed":[46],"for":[47,65,133],"like":[54],"multilateral":[55],"analysis,":[58],"quality":[60],"engineering,":[62],"knowledge":[63],"acquisition":[64],"automated":[66],"specifications,":[67],"etc.":[68],"objective":[70],"this":[72],"paper":[73],"is":[74],"evaluate":[76],"different":[78],"Requirements":[81],"Elicitation":[82],"Analysis":[84],"(SecREA)":[85],"based":[87],"on":[88],"following":[90],"parameters:":[91],"(a)":[92],"stakeholders\u2019":[93],"participation,":[94],"(b)":[95],"identification":[96],"functional":[99],"which":[101],"needs":[102],"more":[103],"security,":[104],"(c)":[105],"selection":[106],"prioritization":[108],"under":[113],"crisp":[114],"fuzzy":[116],"environment,":[117],"(d)":[118],"common":[119],"activities":[120],"SecREA":[122,127],"methods.":[123],"After":[124],"evaluating":[125],"methods,":[128],"we":[129],"discuss":[130],"scope":[132],"future":[134],"work.":[135]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-10-01T08:54:57.152042","created_date":"2021-06-22T00:00:00"}