{"id":"https://openalex.org/W2006034650","doi":"https://doi.org/10.4018/jsse.2010102004","title":"Security Requirements Engineering for Evolving Software Systems","display_name":"Security Requirements Engineering for Evolving Software Systems","publication_year":2010,"publication_date":"2010-01-01","ids":{"openalex":"https://openalex.org/W2006034650","doi":"https://doi.org/10.4018/jsse.2010102004","mag":"2006034650"},"language":"en","primary_location":{"id":"doi:10.4018/jsse.2010102004","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jsse.2010102004","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077355226","display_name":"Armstrong Nhlabatsi","orcid":"https://orcid.org/0000-0002-7081-6115"},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Armstrong Nhlabatsi","raw_affiliation_strings":["The Open University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Open University, UK","institution_ids":["https://openalex.org/I204136569"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060861082","display_name":"Bashar Nuseibeh","orcid":"https://orcid.org/0000-0002-3476-053X"},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bashar Nuseibeh","raw_affiliation_strings":["Lero, Ireland & The Open University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lero, Ireland & The Open University, UK","institution_ids":["https://openalex.org/I204136569"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002289161","display_name":"Yijun Yu","orcid":"https://orcid.org/0000-0002-7154-8570"},"institutions":[{"id":"https://openalex.org/I204136569","display_name":"The Open University","ror":"https://ror.org/05mzfcs16","country_code":"GB","type":"education","lineage":["https://openalex.org/I204136569"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Yijun Yu","raw_affiliation_strings":["The Open University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Open University, UK","institution_ids":["https://openalex.org/I204136569"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I204136569"],"apc_list":null,"apc_paid":null,"fwci":8.4924,"has_fulltext":false,"cited_by_count":28,"citation_normalized_percentile":{"value":0.97388072,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"1","issue":"1","first_page":"54","last_page":"73"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7214989066123962},{"id":"https://openalex.org/keywords/software-evolution","display_name":"Software evolution","score":0.5671398639678955},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.558001697063446},{"id":"https://openalex.org/keywords/security-engineering","display_name":"Security engineering","score":0.536740243434906},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.5293722152709961},{"id":"https://openalex.org/keywords/business-requirements","display_name":"Business requirements","score":0.48619788885116577},{"id":"https://openalex.org/keywords/software-requirements","display_name":"Software requirements","score":0.46957892179489136},{"id":"https://openalex.org/keywords/software-system","display_name":"Software system","score":0.43952205777168274},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.43386927247047424},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4223329424858093},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.366820752620697},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33945268392562866},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.2675851583480835},{"id":"https://openalex.org/keywords/component-based-software-engineering","display_name":"Component-based software engineering","score":0.22094887495040894},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.20459970831871033},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.20415419340133667},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.18629580736160278},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10107472538948059},{"id":"https://openalex.org/keywords/operations-management","display_name":"Operations management","score":0.09439188241958618},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09048241376876831},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08285519480705261},{"id":"https://openalex.org/keywords/work-in-process","display_name":"Work in process","score":0.07588443160057068}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7214989066123962},{"id":"https://openalex.org/C202105479","wikidata":"https://www.wikidata.org/wiki/Q265013","display_name":"Software evolution","level":5,"score":0.5671398639678955},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.558001697063446},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.536740243434906},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.5293722152709961},{"id":"https://openalex.org/C123247970","wikidata":"https://www.wikidata.org/wiki/Q5001932","display_name":"Business requirements","level":4,"score":0.48619788885116577},{"id":"https://openalex.org/C54534927","wikidata":"https://www.wikidata.org/wiki/Q4462275","display_name":"Software requirements","level":5,"score":0.46957892179489136},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.43952205777168274},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43386927247047424},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4223329424858093},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.366820752620697},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33945268392562866},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2675851583480835},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.22094887495040894},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.20459970831871033},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.20415419340133667},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.18629580736160278},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10107472538948059},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.09439188241958618},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09048241376876831},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08285519480705261},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.07588443160057068}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.4018/jsse.2010102004","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jsse.2010102004","pdf_url":null,"source":{"id":"https://openalex.org/S43656255","display_name":"International Journal of Secure Software Engineering","issn_l":"1947-3036","issn":["1947-3036","1947-3044"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Secure Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:igg:jsse00:v:1:y:2010:i:1:p:54-73","is_oa":false,"landing_page_url":"http://services.igi-global.com/resolvedoi/resolve.aspx?doi=10.4018/jsse.2010102004","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":175,"referenced_works":["https://openalex.org/W50692281","https://openalex.org/W71569370","https://openalex.org/W88173586","https://openalex.org/W150203085","https://openalex.org/W178148067","https://openalex.org/W181640286","https://openalex.org/W368434414","https://openalex.org/W427821168","https://openalex.org/W1486178352","https://openalex.org/W1487374163","https://openalex.org/W1495153211","https://openalex.org/W1506513518","https://openalex.org/W1518530753","https://openalex.org/W1522799614","https://openalex.org/W1524147119","https://openalex.org/W1529207357","https://openalex.org/W1531018107","https://openalex.org/W1546502429","https://openalex.org/W1551592336","https://openalex.org/W1552830686","https://openalex.org/W1559133364","https://openalex.org/W1568509697","https://openalex.org/W1572143836","https://openalex.org/W1598835457","https://openalex.org/W1603339633","https://openalex.org/W1689870062","https://openalex.org/W1786578488","https://openalex.org/W1842557202","https://openalex.org/W1874464064","https://openalex.org/W1885148506","https://openalex.org/W1922979104","https://openalex.org/W1935624361","https://openalex.org/W1964429554","https://openalex.org/W1967932512","https://openalex.org/W1968542268","https://openalex.org/W1971320885","https://openalex.org/W1975831514","https://openalex.org/W1976758788","https://openalex.org/W1977353240","https://openalex.org/W1979686314","https://openalex.org/W1980656527","https://openalex.org/W1985483076","https://openalex.org/W1985601439","https://openalex.org/W1986671085","https://openalex.org/W1988505038","https://openalex.org/W1988643845","https://openalex.org/W1992718490","https://openalex.org/W2001726636","https://openalex.org/W2002454301","https://openalex.org/W2007231177","https://openalex.org/W2007807436","https://openalex.org/W2008164297","https://openalex.org/W2021188747","https://openalex.org/W2022338738","https://openalex.org/W2025377300","https://openalex.org/W2027576706","https://openalex.org/W2031188354","https://openalex.org/W2034113185","https://openalex.org/W2035004000","https://openalex.org/W2044550963","https://openalex.org/W2046546118","https://openalex.org/W2046645722","https://openalex.org/W2052700833","https://openalex.org/W2053316513","https://openalex.org/W2055789361","https://openalex.org/W2057488764","https://openalex.org/W2061475652","https://openalex.org/W2067080451","https://openalex.org/W2068726498","https://openalex.org/W2070005657","https://openalex.org/W2070064937","https://openalex.org/W2071069188","https://openalex.org/W2071125767","https://openalex.org/W2072561921","https://openalex.org/W2077090091","https://openalex.org/W2082789796","https://openalex.org/W2085133470","https://openalex.org/W2088448578","https://openalex.org/W2091003226","https://openalex.org/W2093287224","https://openalex.org/W2093407393","https://openalex.org/W2097154968","https://openalex.org/W2097744609","https://openalex.org/W2098019984","https://openalex.org/W2098297805","https://openalex.org/W2098634112","https://openalex.org/W2099087896","https://openalex.org/W2099645685","https://openalex.org/W2100916750","https://openalex.org/W2103520332","https://openalex.org/W2107930672","https://openalex.org/W2108907316","https://openalex.org/W2108999965","https://openalex.org/W2110157102","https://openalex.org/W2110522568","https://openalex.org/W2110537096","https://openalex.org/W2111039488","https://openalex.org/W2113435553","https://openalex.org/W2113664265","https://openalex.org/W2114207521","https://openalex.org/W2115818354","https://openalex.org/W2116693957","https://openalex.org/W2119275622","https://openalex.org/W2120819709","https://openalex.org/W2121764468","https://openalex.org/W2124790413","https://openalex.org/W2126313201","https://openalex.org/W2126769445","https://openalex.org/W2127276330","https://openalex.org/W2127393411","https://openalex.org/W2127984352","https://openalex.org/W2128267988","https://openalex.org/W2130310983","https://openalex.org/W2131730994","https://openalex.org/W2132644616","https://openalex.org/W2133281166","https://openalex.org/W2134106421","https://openalex.org/W2134196660","https://openalex.org/W2135220153","https://openalex.org/W2136117679","https://openalex.org/W2136170403","https://openalex.org/W2136888396","https://openalex.org/W2137855294","https://openalex.org/W2138068140","https://openalex.org/W2139907081","https://openalex.org/W2140379659","https://openalex.org/W2141085093","https://openalex.org/W2142698935","https://openalex.org/W2144369124","https://openalex.org/W2146863076","https://openalex.org/W2147898522","https://openalex.org/W2148566119","https://openalex.org/W2149257325","https://openalex.org/W2151046531","https://openalex.org/W2151949169","https://openalex.org/W2153177282","https://openalex.org/W2154187332","https://openalex.org/W2155266873","https://openalex.org/W2155944343","https://openalex.org/W2156221105","https://openalex.org/W2156379448","https://openalex.org/W2156817008","https://openalex.org/W2157014526","https://openalex.org/W2157296121","https://openalex.org/W2157532329","https://openalex.org/W2160821395","https://openalex.org/W2163132186","https://openalex.org/W2164988879","https://openalex.org/W2167104015","https://openalex.org/W2167110561","https://openalex.org/W2167522113","https://openalex.org/W2169195484","https://openalex.org/W2169359651","https://openalex.org/W2171010210","https://openalex.org/W2171627300","https://openalex.org/W2493238652","https://openalex.org/W3013722352","https://openalex.org/W3013753688","https://openalex.org/W3161918289","https://openalex.org/W4213432894","https://openalex.org/W4229680087","https://openalex.org/W4237336295","https://openalex.org/W4238040396","https://openalex.org/W4245158337","https://openalex.org/W4249392258","https://openalex.org/W4249606710","https://openalex.org/W4253144791","https://openalex.org/W4255782415","https://openalex.org/W6606043380","https://openalex.org/W6640129242","https://openalex.org/W6670082407","https://openalex.org/W6677949648","https://openalex.org/W6987244682","https://openalex.org/W6995947862","https://openalex.org/W7071127892"],"related_works":["https://openalex.org/W3092221863","https://openalex.org/W4254568495","https://openalex.org/W2183689037","https://openalex.org/W3123721539","https://openalex.org/W142054160","https://openalex.org/W2608001814","https://openalex.org/W2968866371","https://openalex.org/W2047626779","https://openalex.org/W4210674956","https://openalex.org/W3153864189"],"abstract_inverted_index":{"Long-lived":[0],"software":[1,116,129,145],"systems":[2,13,146],"often":[3],"undergo":[4],"evolution":[5,36,130],"over":[6],"an":[7],"extended":[8],"period.":[9],"Evolution":[10],"of":[11,32,70,115,125,128,138,144],"these":[12],"is":[14],"inevitable":[15],"as":[16,147],"they":[17,107,148],"need":[18],"to":[19,21,55,91,100,141],"continue":[20],"satisfy":[22],"changing":[23],"business":[24],"needs,":[25],"new":[26],"regulations":[27],"and":[28,30,104,131],"standards,":[29],"introduction":[31],"novel":[33],"technologies.":[34],"Such":[35],"may":[37,59,87],"involve":[38],"changes":[39,58,81],"that":[40,47,63,106,121],"add,":[41],"remove,":[42],"or":[43,46],"modify":[44],"features;":[45],"migrate":[48],"the":[49,113,126,136],"system":[50,72,86],"from":[51],"one":[52],"operating":[53],"platform":[54],"another.":[56],"These":[57],"result":[60],"in":[61,66,76],"requirements":[62,102,143],"were":[64],"satisfied":[65,75],"a":[67,71,85,122],"previous":[68],"release":[69],"not":[73],"being":[74],"subsequent":[77],"versions.":[78],"When":[79],"evolutionary":[80],"violate":[82],"security":[83,101,132,142],"requirements,":[84],"be":[88],"left":[89],"vulnerable":[90],"attacks.":[92],"In":[93],"this":[94],"article":[95],"we":[96],"review":[97],"current":[98],"approaches":[99],"engineering":[103,133],"conclude":[105],"lack":[108],"explicit":[109],"support":[110],"for":[111],"managing":[112],"effects":[114],"evolution.":[117],"We":[118],"then":[119],"suggest":[120],"cross":[123],"fertilization":[124],"areas":[127],"would":[134],"address":[135],"problem":[137],"maintaining":[139],"compliance":[140],"evolve.":[149]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":5},{"year":2012,"cited_by_count":2}],"updated_date":"2026-06-11T06:19:23.411458","created_date":"2025-10-10T00:00:00"}