{"id":"https://openalex.org/W1987421153","doi":"https://doi.org/10.4018/ijsse.2014040102","title":"A Structured Method for Security Requirements Elicitation concerning the Cloud Computing Domain","display_name":"A Structured Method for Security Requirements Elicitation concerning the Cloud Computing Domain","publication_year":2014,"publication_date":"2014-04-01","ids":{"openalex":"https://openalex.org/W1987421153","doi":"https://doi.org/10.4018/ijsse.2014040102","mag":"1987421153"},"language":"en","primary_location":{"id":"doi:10.4018/ijsse.2014040102","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijsse.2014040102","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024651104","display_name":"Kristian Beckers","orcid":null},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kristian Beckers","raw_affiliation_strings":["Univeristy of Duisburg-Essen, Essen, Germany","Univeristy of Duisburg-Essen, Essen, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univeristy of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"Univeristy of Duisburg-Essen, Essen, Germany#TAB#","institution_ids":["https://openalex.org/I62318514"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087962548","display_name":"Isabelle C\u00f4t\u00e9","orcid":"https://orcid.org/0000-0002-8360-9086"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Isabelle C\u00f4t\u00e9","raw_affiliation_strings":["ITESYS Institute for Technical Systems GmbH, Dortmund, Germany","ITESYS Institute for Technical Systems GmbH, Dortmund, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITESYS Institute for Technical Systems GmbH, Dortmund, Germany","institution_ids":[]},{"raw_affiliation_string":"ITESYS Institute for Technical Systems GmbH, Dortmund, Germany#TAB#","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001892609","display_name":"Ludger Goeke","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ludger Goeke","raw_affiliation_strings":["ITESYS Institute for Technical Systems GmbH, Dortmund, Germany","ITESYS Institute for Technical Systems GmbH, Dortmund, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITESYS Institute for Technical Systems GmbH, Dortmund, Germany","institution_ids":[]},{"raw_affiliation_string":"ITESYS Institute for Technical Systems GmbH, Dortmund, Germany#TAB#","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042814282","display_name":"Selim G\u00fcler","orcid":"https://orcid.org/0000-0002-6949-0920"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Selim G\u00fcler","raw_affiliation_strings":["EASY SOFTWARE AG, M\u00fclheim an der Ruhr, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"EASY SOFTWARE AG, M\u00fclheim an der Ruhr, Germany","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064516321","display_name":"Maritta Heisel","orcid":"https://orcid.org/0000-0002-3275-2819"},"institutions":[{"id":"https://openalex.org/I62318514","display_name":"University of Duisburg-Essen","ror":"https://ror.org/04mz5ra38","country_code":"DE","type":"education","lineage":["https://openalex.org/I62318514"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maritta Heisel","raw_affiliation_strings":["University of Duisburg-Essen, Essen, Germany","University of Duisburg-Essen , Essen , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Duisburg-Essen, Essen, Germany","institution_ids":["https://openalex.org/I62318514"]},{"raw_affiliation_string":"University of Duisburg-Essen , Essen , Germany","institution_ids":["https://openalex.org/I62318514"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0428,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.93880181,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"5","issue":"2","first_page":"20","last_page":"43"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8398855924606323},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8292937278747559},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.7724671363830566},{"id":"https://openalex.org/keywords/requirements-elicitation","display_name":"Requirements elicitation","score":0.6492235660552979},{"id":"https://openalex.org/keywords/business-requirements","display_name":"Business requirements","score":0.5335578918457031},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4947144687175751},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.49034786224365234},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4642968773841858},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.4224676489830017},{"id":"https://openalex.org/keywords/requirements-analysis","display_name":"Requirements analysis","score":0.41814088821411133},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.41288313269615173},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3754984736442566},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.27724629640579224},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.24089282751083374},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.08852091431617737},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.06925347447395325}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8398855924606323},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8292937278747559},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.7724671363830566},{"id":"https://openalex.org/C45384764","wikidata":"https://www.wikidata.org/wiki/Q838667","display_name":"Requirements elicitation","level":4,"score":0.6492235660552979},{"id":"https://openalex.org/C123247970","wikidata":"https://www.wikidata.org/wiki/Q5001932","display_name":"Business requirements","level":4,"score":0.5335578918457031},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4947144687175751},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.49034786224365234},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4642968773841858},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.4224676489830017},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.41814088821411133},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.41288313269615173},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3754984736442566},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.27724629640579224},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.24089282751083374},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.08852091431617737},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.06925347447395325},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/ijsse.2014040102","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijsse.2014040102","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jsse00:v:5:y:2014:i:2:p:20-43","is_oa":false,"landing_page_url":"http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/ijsse.2014040102","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W81746891","https://openalex.org/W627223166","https://openalex.org/W657731981","https://openalex.org/W1514888816","https://openalex.org/W1523003890","https://openalex.org/W1523197392","https://openalex.org/W1551592336","https://openalex.org/W1649645444","https://openalex.org/W1968983388","https://openalex.org/W2012753837","https://openalex.org/W2035437115","https://openalex.org/W2111695375","https://openalex.org/W2131629857","https://openalex.org/W2144677880","https://openalex.org/W2151519068","https://openalex.org/W2209768828","https://openalex.org/W2275530856","https://openalex.org/W6679408652"],"related_works":["https://openalex.org/W2097950940","https://openalex.org/W2243653617","https://openalex.org/W4254568495","https://openalex.org/W142054160","https://openalex.org/W4292814261","https://openalex.org/W3119801415","https://openalex.org/W2567178710","https://openalex.org/W2574990557","https://openalex.org/W2472769502","https://openalex.org/W4210674956"],"abstract_inverted_index":{"Cloud":[0,36,166],"computing":[1,59,151],"systems":[2],"offer":[3],"an":[4,39,252],"attractive":[5],"alternative":[6],"to":[7,41,66,79,84,112,140,180,219,238],"traditional":[8],"IT-systems,":[9],"because":[10,103],"of":[11,26,57,89,104,107,144,173,205],"economic":[12],"benefits":[13,24],"that":[14,34,69,230],"arise":[15],"from":[16,216],"the":[17,55,70,105,119,142,171,174,203,206,214,217,220,244],"cloud's":[18],"scalable":[19],"and":[20,109,130,187,211],"flexible":[21],"IT-resources.":[22,50],"The":[23,31,134,195,246],"are":[25,75],"particular":[27],"interest":[28],"for":[29,77],"SME's.":[30],"reason":[32],"is":[33,99,198],"using":[35,153,251],"Resources":[37],"allows":[38],"SME":[40],"focus":[42],"on":[43,49],"its":[44],"core":[45],"business":[46,146],"rather":[47],"than":[48],"However,":[51],"numerous":[52],"concerns":[53],"about":[54],"security":[56,90,94,128,132,184,190,221,235],"cloud":[58,63,71,116,138,150,160,207],"services":[60,72],"exist.":[61],"Potential":[62],"customers":[64,139],"have":[65,83,85,227],"be":[67,178],"confident":[68],"they":[73,82,226],"acquire":[74],"secure":[76],"them":[78],"use.":[80],"Therefore,":[81,118],"a":[86,100,115,122,149,154,158,234],"clear":[87],"set":[88],"requirements":[91,98,129,185,222],"covering":[92],"their":[93,145,249],"needs.":[95],"Eliciting":[96],"these":[97],"difficult":[101],"task,":[102],"amount":[106],"stakeholders":[108],"technical":[110],"components":[111],"consider":[113],"in":[114,148,243],"environment.":[117],"authors":[120,247],"propose":[121],"structured,":[123],"pattern-based":[124,155],"method":[125,135,197,250],"supporting":[126],"eliciting":[127],"selecting":[131],"measures.":[133],"guides":[136],"potential":[137,159],"model":[141],"application":[143],"case":[147],"context":[152],"approach.":[156],"Thus,":[157],"customer":[161],"can":[162,177],"instantiate":[163],"our":[164,182],"so-called":[165],"System":[167],"Analysis":[168],"Pattern.":[169],"Then,":[170],"information":[172,215],"instantiated":[175],"pattern":[176,210],"used":[179],"fill-out":[181],"textual":[183],"patterns":[186],"individual":[188],"defined":[189],"requirement":[191,236],"patterns,":[192],"as":[193,255],"well.":[194],"presented":[196],"tool-supported.":[199],"Our":[200],"tool":[201],"supports":[202],"instantiation":[204],"system":[208,254],"analysis":[209],"automatically":[212],"transfers":[213],"instance":[218],"patterns.":[223],"In":[224],"addition,":[225],"validation":[228],"conditions":[229],"check":[231],"e.g.,":[232],"if":[233],"refers":[237],"at":[239],"least":[240],"one":[241],"element":[242],"cloud.":[245],"illustrate":[248],"online-banking":[253],"running":[256],"example.":[257]},"counts_by_year":[{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2}],"updated_date":"2026-06-11T06:19:23.411458","created_date":"2025-10-10T00:00:00"}