Related Experiment Video
Updated: Aug 30, 2025
11:18
Using the Threat Probability Task to Assess Anxiety and Fear During Uncertain and Certain Threat
Published on: September 12, 2014
15.3K
An Efficient Identification of Security Threats in Requirement Engineering Methodology
R Subha1, Anandakumar Haldorai1
1Department of Computer Science and Engineering, Sri Eshwar College of Engineering, Coimbatore, Tamil Nadu, India.
Computational Intelligence and Neuroscience
|August 29, 2022
Summary
This study introduces a new technique to identify security threats early in software development. The Identification of Security Threats during Requirement Engineering (ISTDRE) method helps create more secure Information Technology (IT) applications.
Area of Science:
- Software Engineering
- Information Security
- Requirements Engineering
Background:
- Modern life heavily relies on Information Technology (IT) applications for daily activities and online transactions.
- Increased internet connectivity exposes IT systems to significant security vulnerabilities.
- Proactive identification of security threats is crucial, especially during the early stages of software development.
Purpose of the Study:
- To propose a structured method for identifying security threats during the requirements phase of software development.
- To introduce the Identification of Security Threats during Requirement Engineering (ISTDRE) technique.
- To enhance the creation of threat-free software by integrating security specifications early.
Main Methods:
- Development of the Identification of Security Threats during Requirement Engineering (ISTDRE) technique.
- The ISTDRE technique comprises four key components: Hack Point (HP), Speculation Point (SP), Trust Point (TP), and Reliable Point (RP).
- Validation of the ISTDRE methodology through a case study on an Enterprise Resource Planning (ERP) system, comparing it with Model Oriented Security Requirements Engineering (MOSRE) and System Quality Requirements Engineering (SQUARE) methodologies.
Main Results:
- The ISTDRE technique provides a structured approach to recognizing security specifications.
- Early detection of security risks is facilitated by the proposed methodology.
- The case study aims to demonstrate the effectiveness of ISTDRE compared to existing methods.
Conclusions:
- Integrating security considerations early in the requirement engineering process is essential for developing secure software.
- The ISTDRE technique offers a novel and structured approach to proactively identify and mitigate security threats.
- Further validation through case studies will confirm the practical benefits of ISTDRE in real-world software development projects.
More Related Videos
08:19Protocol for the Evaluation of MRI Artifacts Caused by Metal Implants to Assess the Suitability of Implants and the Vulnerability of Pulse Sequences
Published on: May 17, 2018
9.9K
05:26Author Spotlight: Innovations in iTUG Test for Enhanced Risk Assessment and Cognitive Insights
Published on: October 25, 2024
1.2K
Related Concept Videos
01:22Design Consideration
312
Designing a structure involves a series of considerations, primarily the material's ultimate strength, calculated through tests that measure changes under increased force until the material reaches its breaking point or limit. The ultimate load, where the material breaks, is divided by its original cross-sectional area, resulting in the ultimate normal stress or strength. The ultimate shearing stress is another significant factor taken into account.
The factor of safety is another key...
The factor of safety is another key...
312
02:16Stereotype Content Model
14.8K
The Stereotype Content Model (SCM) was first proposed by Susan Fiske and her colleagues (Fiske, Cuddy, Glick & Xu, 2002; see also Fiske, 2012 and Fiske, 2017). The SCM specifies that when someone encounters a new group, they will stereotype them based on two metrics: warmth—or that group’s perceived intent, and how likely they are to provide help or inflict harm—and competence—or their ability to carry out that objective. Depending on the warmth-competence...
14.8K
01:15Routh-Hurwitz Criterion I
318
Consider an electrical power grid, where stability is essential to prevent blackouts. The Routh-Hurwitz criterion is a valuable tool for assessing system stability under varying load conditions or faults. By analyzing the closed-loop transfer function, the Routh-Hurwitz criterion helps determine whether the system remains stable.
To apply the Routh-Hurwitz criterion, a Routh table is constructed. The table's rows are labeled with powers of the complex frequency variable s, starting from the...
To apply the Routh-Hurwitz criterion, a Routh table is constructed. The table's rows are labeled with powers of the complex frequency variable s, starting from the...
318
01:16Response Surface Methodology
236
Response Surface Methodology (RSM) is a collection of statistical and mathematical techniques used to develop, improve, and optimize processes. It is particularly valuable when many input variables or factors potentially influence a response variable.
The process of RSM involves several key steps:
The process of RSM involves several key steps:
236
01:25Yield Criteria for Ductile Materials under Plane Stress
212
In designing structural elements and machine parts using ductile materials, it is crucial to ensure that these components withstand applied stresses without yielding. Yielding is initially determined through a tensile test, which evaluates the material's response to uniaxial stress. However, tensile stress is insufficient when components face biaxial or plane stress conditions This condition requires advanced criteria to predict failure.
The Maximum Shearing Stress Criterion, also known as...
The Maximum Shearing Stress Criterion, also known as...
212
01:21Development of Analytical Methods
671
An analytical methodology can be divided into four sequential steps: technique, method, procedure, and protocol. A technique is a scientific principle that rationalizes a specific phenomenon through chemical measurements. Adapting a technique for analyzing a sample of interest is termed a method. The procedure outlines the directions for performing the analysis via an analytical method. The protocol is the detailed guidelines on the procedure, which should be strictly followed to obtain the...
671