{"id":"https://openalex.org/W3013931430","doi":"https://doi.org/10.5220/0008960604730480","title":"A Practical Approach to Stakeholder-driven Determination of Security Requirements based on the GDPR and Common Criteria","display_name":"A Practical Approach to Stakeholder-driven Determination of Security Requirements based on the GDPR and Common Criteria","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3013931430","doi":"https://doi.org/10.5220/0008960604730480","mag":"3013931430"},"language":"en","primary_location":{"id":"doi:10.5220/0008960604730480","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0008960604730480","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.5220/0008960604730480","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5097496876","display_name":"Sandra Zinsmaier","orcid":null},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]},{"id":"https://openalex.org/I9649716","display_name":"HTWG Hochschule Konstanz - Technik, Wirtschaft und Gestaltung","ror":"https://ror.org/051qw9f78","country_code":"DE","type":"education","lineage":["https://openalex.org/I9649716"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sandra Zinsmaier","raw_affiliation_strings":["Siemens Logistics GmbH, Konstanz, Germany, HTWG Konstanz University of Applied Sciences, Konstanz, Germany, University of Konstanz, Konstanz, Germany, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens Logistics GmbH, Konstanz, Germany, HTWG Konstanz University of Applied Sciences, Konstanz, Germany, University of Konstanz, Konstanz, Germany, --- Select a Country ---","institution_ids":["https://openalex.org/I189712700","https://openalex.org/I9649716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021257256","display_name":"Hanno Langweg","orcid":"https://orcid.org/0000-0002-4156-5775"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]},{"id":"https://openalex.org/I9649716","display_name":"HTWG Hochschule Konstanz - Technik, Wirtschaft und Gestaltung","ror":"https://ror.org/051qw9f78","country_code":"DE","type":"education","lineage":["https://openalex.org/I9649716"]}],"countries":["DE","NO"],"is_corresponding":false,"raw_author_name":"Hanno Langweg","raw_affiliation_strings":["HTWG Konstanz University of Applied Sciences, Konstanz, Germany, Department of Information Security and Communication Technology, Faculty of Information Technology and Electrical Engineering, NTNU, Norwegian University of Science and Technology, Gj\u00f8vik, Norway, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HTWG Konstanz University of Applied Sciences, Konstanz, Germany, Department of Information Security and Communication Technology, Faculty of Information Technology and Electrical Engineering, NTNU, Norwegian University of Science and Technology, Gj\u00f8vik, Norway, --- Select a Country ---","institution_ids":["https://openalex.org/I204778367","https://openalex.org/I9649716"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090617012","display_name":"Marcel Waldvogel","orcid":"https://orcid.org/0000-0003-1665-0166"},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marcel Waldvogel","raw_affiliation_strings":["University of Konstanz, Konstanz, Germany, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Konstanz, Konstanz, Germany, --- Select a Country ---","institution_ids":["https://openalex.org/I189712700"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8177,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.85765954,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"473","last_page":"480"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9835000038146973,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stakeholder","display_name":"Stakeholder","score":0.6579192876815796},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6528705954551697},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5557196736335754},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.47908955812454224},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.46797898411750793},{"id":"https://openalex.org/keywords/requirements-engineering","display_name":"Requirements engineering","score":0.463113933801651},{"id":"https://openalex.org/keywords/requirements-analysis","display_name":"Requirements analysis","score":0.4556863307952881},{"id":"https://openalex.org/keywords/requirements-management","display_name":"Requirements management","score":0.4330317974090576},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38881269097328186},{"id":"https://openalex.org/keywords/process-management","display_name":"Process management","score":0.373029887676239},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.28881609439849854},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.17717334628105164},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1398884654045105}],"concepts":[{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.6579192876815796},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6528705954551697},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5557196736335754},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.47908955812454224},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.46797898411750793},{"id":"https://openalex.org/C6604083","wikidata":"https://www.wikidata.org/wiki/Q376937","display_name":"Requirements engineering","level":3,"score":0.463113933801651},{"id":"https://openalex.org/C59488412","wikidata":"https://www.wikidata.org/wiki/Q187147","display_name":"Requirements analysis","level":3,"score":0.4556863307952881},{"id":"https://openalex.org/C173577280","wikidata":"https://www.wikidata.org/wiki/Q530038","display_name":"Requirements management","level":4,"score":0.4330317974090576},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38881269097328186},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.373029887676239},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.28881609439849854},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.17717334628105164},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1398884654045105},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5220/0008960604730480","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0008960604730480","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:elib.uni-konstanz.de-htwg:2597","is_oa":true,"landing_page_url":"https://opus.htwg-konstanz.de/frontdoor/index/index/docId/2597","pdf_url":null,"source":{"id":"https://openalex.org/S4306400170","display_name":"URN-Resolver at the German National Library (German National Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2802635041","host_organization_name":"Technische Informationsbibliothek (TIB)","host_organization_lineage":["https://openalex.org/I2802635041"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conferenceobject"}],"best_oa_location":{"id":"doi:10.5220/0008960604730480","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0008960604730480","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1490921502","https://openalex.org/W2238632658","https://openalex.org/W2363165856","https://openalex.org/W2758128462","https://openalex.org/W2472769502","https://openalex.org/W4254568495","https://openalex.org/W2047626779","https://openalex.org/W2242308721","https://openalex.org/W142054160","https://openalex.org/W1998119124"],"abstract_inverted_index":{"We":[0],"propose":[1],"and":[2,12,15,30,43,77,99],"apply":[3],"a":[4,54,81,93],"requirements":[5,36,45,86],"engineering":[6,37],"approach":[7,71],"that":[8],"focuses":[9],"on":[10],"security":[11,29,42],"privacy":[13,31,44],"properties":[14],"takes":[16],"into":[17,34],"account":[18],"various":[19],"stakeholder":[20],"interests.":[21],"The":[22,57,70],"proposed":[23],"methodology":[24],"facilitates":[25],"the":[26,35,50,67,73],"integration":[27],"of":[28,53,75],"by":[32],"design":[33],"process.":[38],"Thus,":[39],"specific,":[40],"detailed":[41],"can":[46],"be":[47],"implemented":[48],"from":[49,87],"very":[51],"beginning":[52],"software":[55],"project.":[56],"method":[58],"is":[59],"applied":[60],"to":[61,83,96],"an":[62],"exemplary":[63],"application":[64,74],"scenario":[65],"in":[66],"logistics":[68],"industry.":[69],"includes":[72],"threat":[76],"risk":[78],"rating":[79],"methodologies,":[80],"technique":[82],"derive":[84],"technical":[85],"legal":[88],"texts,":[89],"as":[90,92],"well":[91],"matching":[94],"process":[95],"avoid":[97],"duplication":[98],"accumulate":[100],"all":[101],"essential":[102],"requirements.":[103]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}