Ontologies for Security Requirements: A Literature Survey and Classification

Amina Souag (1) , Camille Salinesi (1) , Isabelle Wattiau (2, 3)

1 CRI - Centre de Recherche en Informatique de Paris 1
2 CEDRIC - ISID - CEDRIC. Ingénierie des Systèmes d'Information et de Décision
3 ESSEC Business School

Despite existing methodologies in the field, most requirements engineers are poorly trained to define security requirements. This is due to a considerable lack of security knowledge. Some security ontologies have been proposed, but a gap still exists between the two fields of security requirement engineering and ontologies. This paper is a survey, it proposes an analysis and a typology of existing security ontologies and their use for requirements definition.

Keywords: Security; Ontologies; Requirements; Analysis; Classification

Domains: Other [cs.OH]

Amina Souag, Camille Salinesi, Isabelle Wattiau. Ontologies for Security Requirements: A Literature Survey and Classification. The 2nd International Workshop on Information Systems Security Engineering WISSE'12 in conjunction with the 24th International Conference on Advanced Information Systems Engineering (CAiSE'12), Jun 2012, Gdansk, Poland. pp.1-8. ⟨hal-00709229⟩