Ontologies for Security Requirements: A Literature Survey and Classification (long version)

Amina Souag (1) , Camille Salinesi (1) , Isabelle Wattiau (2, 3)

1 CRI - Centre de Recherche en Informatique de Paris 1
2 CEDRIC - ISID - CEDRIC. Ingénierie des Systèmes d'Information et de Décision
3 ESSEC Business School

Despite existing methodologies in the field, most requirements engineers are poorly trained to define security requirements. This is due to a considerable lack of security knowledge. Some security ontologies have been proposed, but a gap still exists between the two fields of security requirement engineering and ontologies. This paper is a survey, it proposes an analysis and a typology of existing security ontologies and their use for requirements definition.

Mots clés: Security; Ontologies; Requirements; Analysis; Classification.; Classification

Domaines: Autre [cs.OH]

Amina Souag, Camille Salinesi, Isabelle Wattiau. Ontologies for Security Requirements: A Literature Survey and Classification (long version). 2012. ⟨hal-00709970⟩