{"id":"https://openalex.org/W2091604821","doi":"https://doi.org/10.1142/s0218194013500174","title":"ENHANCING GOAL-ORIENTED SECURITY REQUIREMENTS ANALYSIS USING COMMON CRITERIA-BASED KNOWLEDGE","display_name":"ENHANCING GOAL-ORIENTED SECURITY REQUIREMENTS ANALYSIS USING COMMON CRITERIA-BASED KNOWLEDGE","publication_year":2013,"publication_date":"2013-06-01","ids":{"openalex":"https://openalex.org/W2091604821","doi":"https://doi.org/10.1142/s0218194013500174","mag":"2091604821"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194013500174","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194013500174","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018583174","display_name":"Motoshi Saeki","orcid":null},"institutions":[{"id":"https://openalex.org/I114531698","display_name":"Tokyo Institute of Technology","ror":"https://ror.org/0112mx960","country_code":"JP","type":"education","lineage":["https://openalex.org/I114531698"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"MOTOSHI SAEKI","raw_affiliation_strings":["Department of Computer Science, Tokyo Institute of Technology, Ookayama 2\u201312\u20131, Meguro-ku, Tokyo 152\u20138552, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tokyo Institute of Technology, Ookayama 2\u201312\u20131, Meguro-ku, Tokyo 152\u20138552, Japan","institution_ids":["https://openalex.org/I114531698"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066400160","display_name":"Shinpei Hayashi","orcid":"https://orcid.org/0000-0001-7988-7772"},"institutions":[{"id":"https://openalex.org/I114531698","display_name":"Tokyo Institute of Technology","ror":"https://ror.org/0112mx960","country_code":"JP","type":"education","lineage":["https://openalex.org/I114531698"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"SHINPEI HAYASHI","raw_affiliation_strings":["Department of Computer Science, Tokyo Institute of Technology, Ookayama 2\u201312\u20131, Meguro-ku, Tokyo 152\u20138552, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Tokyo Institute of Technology, Ookayama 2\u201312\u20131, Meguro-ku, Tokyo 152\u20138552, Japan","institution_ids":["https://openalex.org/I114531698"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042986574","display_name":"Haruhiko Kaiya","orcid":"https://orcid.org/0000-0001-9816-8001"},"institutions":[{"id":"https://openalex.org/I137975476","display_name":"Shinshu University","ror":"https://ror.org/0244rem06","country_code":"JP","type":"education","lineage":["https://openalex.org/I137975476"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"HARUHIKO KAIYA","raw_affiliation_strings":["Department of Computer Science, Shinshu University, Wakasato 4\u201317\u20131, Nagano-shi, Nagano 380\u20138553, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Shinshu University, Wakasato 4\u201317\u20131, Nagano-shi, Nagano 380\u20138553, Japan","institution_ids":["https://openalex.org/I137975476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.316,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.93295838,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"23","issue":"05","first_page":"695","last_page":"720"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7736709117889404},{"id":"https://openalex.org/keywords/requirements-elicitation","display_name":"Requirements elicitation","score":0.5547701120376587},{"id":"https://openalex.org/keywords/ontology","display_name":"Ontology","score":0.5067000985145569},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.4759944677352905},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.4721156358718872},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.46799179911613464},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.4669163227081299},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4496661424636841},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.38343048095703125},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.3625362515449524},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.335359126329422},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.3306305408477783},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3114141821861267},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3114008903503418},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.22514450550079346},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.22212502360343933},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09515228867530823}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7736709117889404},{"id":"https://openalex.org/C45384764","wikidata":"https://www.wikidata.org/wiki/Q838667","display_name":"Requirements elicitation","level":4,"score":0.5547701120376587},{"id":"https://openalex.org/C25810664","wikidata":"https://www.wikidata.org/wiki/Q44325","display_name":"Ontology","level":2,"score":0.5067000985145569},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.4759944677352905},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.4721156358718872},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.46799179911613464},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.4669163227081299},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4496661424636841},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.38343048095703125},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.3625362515449524},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.335359126329422},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3306305408477783},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3114141821861267},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3114008903503418},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.22514450550079346},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.22212502360343933},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09515228867530823},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194013500174","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194013500174","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5299999713897705}],"awards":[{"id":"https://openalex.org/G362588738","display_name":"A Pattern Oriented Software Development Method for Agile Adaptation to Security Changes","funder_award_id":"24300011","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G7305646709","display_name":"Study on Semantic Requirements Engineering","funder_award_id":"23500036","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"},{"id":"https://openalex.org/G8819863064","display_name":"A supporting system for predicting vulnerabilities and their countermeasures of an information system during requirements analysis","funder_award_id":"23500042","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W85296427","https://openalex.org/W107405295","https://openalex.org/W1523896369","https://openalex.org/W1606773397","https://openalex.org/W2097154968","https://openalex.org/W2102994123","https://openalex.org/W2105539612","https://openalex.org/W2106326663","https://openalex.org/W2110157102","https://openalex.org/W2111695375","https://openalex.org/W2119259807","https://openalex.org/W2119728648","https://openalex.org/W2129289644","https://openalex.org/W2131730994","https://openalex.org/W2132232128","https://openalex.org/W2143932955","https://openalex.org/W2145973309","https://openalex.org/W2146989366","https://openalex.org/W2147733013","https://openalex.org/W2151451947","https://openalex.org/W2152352067","https://openalex.org/W2154490168","https://openalex.org/W2157437711","https://openalex.org/W2158572645","https://openalex.org/W3041316214","https://openalex.org/W4242182825"],"related_works":["https://openalex.org/W3189065608","https://openalex.org/W1190389589","https://openalex.org/W2013238834","https://openalex.org/W1988225931","https://openalex.org/W2406589135","https://openalex.org/W2605865535","https://openalex.org/W2020194669","https://openalex.org/W1994752878","https://openalex.org/W2183689037","https://openalex.org/W2113064318"],"abstract_inverted_index":{"Goal-oriented":[0],"requirements":[1,24,36,156,200,212,228,261],"analysis":[2,37,262],"(GORA)":[3],"is":[4,16,42,187],"one":[5],"of":[6,69,82,122,135,176,236,248],"the":[7,80,86,202,218,221,234,246,253],"promising":[8],"techniques":[9],"to":[10,18,22,50,130,209,244],"elicit":[11],"software":[12],"requirements,":[13],"and":[14,75,101,106,110,116,154,165,183,225,251],"it":[15],"natural":[17],"consider":[19],"its":[20],"application":[21,64],"security":[23,35,39,46,60,70,113,199,211,226,237,260],"analysis.":[25],"In":[26,162,194,216],"this":[27],"paper,":[28],"we":[29,147],"proposed":[30,141],"a":[31,144,169],"method":[32,84,142,151,250,254],"for":[33,62,112,233],"goal-oriented":[34,198,259],"using":[38],"knowledge":[40,59,126,203],"which":[41],"derived":[43,204],"from":[44,104,205],"several":[45],"targets":[47],"(STs)":[48],"compliant":[49],"Common":[51],"Criteria":[52],"(CC,":[53],"ISO/IEC":[54],"15408).":[55],"We":[56,92,239],"call":[57],"such":[58,71,96,179],"ontology":[61,171],"an":[63,149,173,241],"domain":[65,170],"(SOAD).":[66],"Three":[67],"aspects":[68],"as":[72,97,125,143,180],"confidentiality,":[73],"integrity":[74],"availability":[76],"are":[77],"included":[78],"in":[79,118,168,192,213,255],"scope":[81],"our":[83,140,214,249],"because":[85],"CC":[87],"addresses":[88],"these":[89,108],"three":[90],"aspects.":[91],"extract":[93],"security-related":[94,133],"concepts":[95,109,134,191],"assets,":[98,222],"threats,":[99,223],"countermeasures":[100],"their":[102,166],"relationships":[103,111,167,219],"STs,":[105],"utilize":[107],"goal":[114,181],"elicitation":[115,157],"refinement":[117,182,235],"GORA.":[119],"The":[120],"usage":[121],"certificated":[123],"STs":[124,207],"source":[127],"allows":[128],"us":[129],"reuse":[131],"efficiently":[132],"higher":[136],"quality.":[137],"To":[138],"realize":[139],"supporting":[145],"tool,":[146],"use":[148],"existing":[150],"GOORE":[152],"(goal-oriented":[153],"ontology-driven":[155],"method)":[158],"combining":[159],"with":[160,196,257],"SOAD.":[161],"GOORE,":[163],"terms":[164],"play":[172],"important":[174],"role":[175],"semantic":[177],"processing":[178],"conflict":[184],"identification.":[185],"SOAD":[186],"defined":[188],"based":[189],"on":[190],"STs.":[193],"contrast":[195],"other":[197,258],"methods,":[201],"actual":[206],"contributes":[208],"eliciting":[210],"method.":[215],"addition,":[217],"among":[220],"objectives":[224],"functional":[227],"can":[229],"be":[230],"directly":[231],"reused":[232],"goals.":[238],"show":[240,245],"illustrative":[242],"example":[243],"usefulness":[247],"evaluate":[252],"comparison":[256],"methods.":[263]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}