Una evaluación a los métodos para elicitar requisitos de seguridad

Marina Torrente A. Estella Periutella W.

doi:10.21500/20275846.258

Submitted: 2015-04-10

Published: 2011-12-21

DOI: 10.21500/20275846.258

Una evaluación a los métodos para elicitar requisitos de seguridad

Marina Torrente A. Estella Periutella W.

Universidad de Río Negro, Argentina

View/Download

PDF (Español (España))

FLIP

Dimensions

PlumX

Doi

https://doi.org/10.21500/20275846.258

Issue: Vol. 2 No. 2 (2011): Ingenierías USBMed

How to Cite

Estella Periutella W., M. T. A. (2011). Una evaluación a los métodos para elicitar requisitos de seguridad. Ingenierías USBmed, 2(2), 48–54. https://doi.org/10.21500/20275846.258

More Citation Formats

ACM ACS APA ABNT Chicago Harvard IEEE MLA Turabian Vancouver

Download Citation

Endnote/Zotero/Mendeley (RIS) BibTeX

License terms ▼

This journal provides immediately free access to its contents under the principle that make available the research results for free to the public, helps for a greater global exchange of knowledge.

Therefore, the journal invokes the Creative Commons 4.0

License attributions: Recognition – Non-commertial - Share equal. Commercial use and distribution of original or derivative works are not permitted and must be done with a equal license as the one that regulate the original work.

Abstract

Utilizar un método de elicitación puede ayudar para la especificación de un conjunto coherente y completo de
requisitos de seguridad. Sin embargo, usualmente, los métodos comunes utilizados para elicitar requisitos funcionales no se orientan a requisitos de seguridad, por lo cual, el conjunto resultante de requisitos no los incluye. En este artículo se analizan algunos métodos de elicitación de requisitos de seguridad y se presenta una propuesta para seleccionar el más adecuado; posteriormente, se seleccionan algunos métodos y se aplican a varios estudios de caso.

References

A. Hickey et al. "Requirements Elicitation Techniques: Analyzing the Gap Between Technology Availability and Technology Use". Comparative Technology Transfer and Society, Vol. 1, No. 3, pp. 279-302, 2003.

A. Hickey & A. Davis. "A Unified Model of Requirements Elicitation". Journal of Management Information Systems, Vol. 20, No. 4, pp. 65-84, 2004.

D. Zowghi & C. Coulin. "Requirements Elicitation: A Survey of Techniques, Approaches, and Tools". In A. Aurum & W. Claes (Eds.) Engineering and Managing
Software Requirements. Heidelberg, Germany: Springer- Verlag, 2005.

G. Sindre & A. L. Opdahl. "Eliciting Security Requirements by Misuse Cases". Proceedings of the 37th International Conference on Technology of Object-
Oriented Languages (Tools 37-Pacific 2000). Nov. 20-23, Sydney, Australia, 2000.

G. McGraw. “Software Security: Building Security In”. Boston: Addison-Wesley, 2006.

I. Jacobson. “Object-Oriented Software Engineering: A Use Case Driven Approach”. Boston: Addison-Wesley, 1992.

J. Rumbaugh. "Getting Started: Using Use Cases to Capture Requirements". Journal of Object-Oriented Programming, Vol. 7, No. 5, pp. 8-23, 1994.

A. I. Anton; J. H. Dempster & D. F. Siege. "Deriving Goals from a Use Case Based Requirements Specification for an Electronic Commerce System". Proceedings of the Sixth International Workshop on Requirements Engineering: Foundation for Software Quality (REFSQ 2000). Jun 5-6, Stockholm, Sweden, 2000.

P. Checkland. “Soft System Methodology in Action”. Toronto: John Wiley & Sons, 1990.

Quality Function Deployment. “Frequently Asked Questions About QFD”. Online [May 2011].

Systems Designers. “CORE - The Manual”. SD-Scicon, 1986.

M. Christel & K. Kang. “Issues in Requirements Elicitation”. Technical Report CMU/SEI-92-TR-012, ADA258932. Pittsburgh: Software Engineering Institute,
Carnegie Mellon University, 1992.

G. P. Mullery. "CORE: A Method for Controlled Requirements Specification". Proceedings of the 4th International Conference on Software Engineering (ICSE-4). Sep. 17-19, Munich, Germany, 1979.

A. Finkelstein. "TARA: Tool Assisted Requirements Analysis". In P. Loucopulos & R. Zicari “Conceptual Modeling, Databases and CASE: An Integrated View of
Information Systems Development”. John Wiley & Sons, 1992.

W. Kunz & H. Rittel. “Issues as Elements of Information Systems”. Berkeley: Institute of Urban & Regional Development, 1970.

J. Wood & D. Silver. “Joint Application Development”. New York: Wiley, 1995.

K. Kang et al. “Feature-Oriented Domain Analysis Feasibility Study”. Technical Report CMU/SEI-90-TR- 021, ADA235785. Pittsburgh: Software Engineering
Institute, Carnegie Mellon University, 1990.

L. Kean, L. "Feature-Oriented Domain Analysis". Technical Report CMU/SEI-90-TR-21 ESD-90-TR-222. Software Engineering Institute. Carnegie Mellon University, 1997.

D. Schiffrin. “Approaches to Discourse”. Blackwell Publishers Ltd, 1994.

R. Alvarez. "Discourse Analysis of Requirements and Knowledge Elicitation Interviews". Proceedings of the 35th Hawaii International Conference on System
Sciences (HICSS-35). Jan. 7-10, Big Island, 2002.

R. Hubbard; N. Mead & C. Schroeder. "An Assessment of the Relative Efficiency of a Facilitator-Driven Requirements Collection Process with Respect to the
Conventional Interview Method". Proceedings of the 4th International Conference on Requirements Engineering (ICRE'00). June 19-23, Los Alamitos, California, USA, 2000.

M. Dixon. “A single CASE environment for teaching and learning”. Proceedings of the 9th annual SIGCSE conference on Innovation and technology in computer science education”. Leeds, UK, 28-30 June, 2004.