Security is a concern that must be taken into consideration starting from the early stages of
system development. Over the last two decades, researchers and engineers have …

Privacy has been frequently identified as a main concern for systems that deal with personal
information. However, much of existing work on privacy requirements deals with them as a …

Given the increasing dependence of our societies on networked information systems, the
overall security of these systems should be measured and improved. Existing security …

This paper presents a conceptual framework for security engineering, with a strong focus on
security requirements elicitation and analysis. This conceptual framework establishes a …

Risk analysis is traditionally considered a critical activity for the whole software system's
lifecycle. Risks are identified by considering technical aspects (eg, failures of the system …

Context: Modern internet-based services, ranging from food-delivery to home-caring,
leverage the availability of multiple programmable devices to provide handy services …

It is critical to develop secure software with long-term performance and capability to
withstand and forestall the growing competition in the software development industry. To …

Business process modelling is one of the major aspects in the modern information system
development. Recently business process model and notation (BPMN) has become a …

A joint trust and risk model is introduced for federated cloud services. The model is based on
cloud service providers' performance history. It addresses provider and consumer concerns …

For making informed security decisions during the design of industrial control systems (ICS),
engineers need to process large amounts of security-relevant information outside their area …