There is an increase use of ontology-driven approaches to support requirements
engineering (RE) activities, such as elicitation, analysis, specification, validation and …

Privacy has been frequently identified as a main concern for systems that deal with personal
information. However, much of existing work on privacy requirements deals with them as a …

Effective vulnerability management requires the integration of vulnerability information
available on multiple sources, including social media. The information could be used to …

Security risk management is a knowledge-intensive procedure that requires monitoring and
capturing relevant information that can assist in making the right decision by managers. In …

Development of metrics that are valuable for assessing security and decision making is an
important element of efficient counteraction to cyber threats. The paper proposes an …

Although academia has recognized the importance of explicitly specifying security
requirements in early stages of system developments for years, in reality, many projects mix …

Considerations of safety and security in the early stage of system life cycle are essential to
collect and prioritize operation needs, determine feasibility of the desired system, and …

Given the explosive growth of digitally stored information in modern enterprises, distributed
information systems together with search engines are increasingly used in companies. By …

Policy design is an important part of software development. As security breaches increase in
variety, designing a security policy that addresses all potential breaches becomes a …

Modern information systems are characterized by huge security related data streams. For
cyber security management in such systems, novel models and techniques for efficient …