Ontologies for Security Requirements: A Literature Survey and Classification (long version)

Amina Souag (1) , Camille Salinesi (1) , Isabelle Wattiau (2)

1 CRI - Centre de Recherche en Informatique de Paris 1
2 CEDRIC - ISID - CEDRIC. Ingénierie des Systèmes d'Information et de Décision

Despite existing methodologies in the field, most requirements engineers are poorly trained to define security requirements. This is due to a considerable lack of security knowledge. Some security ontologies have been proposed, but a gap still exists between the two fields of security requirement engineering and ontologies. This paper is a survey, it proposes an analysis and a typology of existing security ontologies and their use for requirements definition.

Keywords: Security; Ontologies; Requirements; Analysis; Classification.; Classification

Domains: Computer Science [cs]; Other [cs.OH]

Amina Souag, Camille Salinesi, Isabelle Wattiau. Ontologies for Security Requirements: A Literature Survey and Classification (long version). 2012. ⟨hal-00709970⟩