安全需求工程研究综述  

A SURVEY ON SECURITY REQUIREMENTS ENGINEERING RESEARCH

作　　者：汪北阳[1,2] 

机构地区：[1]软件工程国家重点实验室(武汉大学),湖北武汉430072 [2]长江大学计算机科学学院,湖北荆州434023

出　　处：《计算机应用与软件》2013年第2期216-220,共5页Computer Applications and Software

基　　金：国家重点基础研究发展计划项目(2007CB310805)

摘　　要：近年来,安全需求工程逐渐成为软件工程领域的研究热点之一。在开发周期的早期阶段引进安全分析和安全工程实践比在应用设计阶段才引进分析的投资回报要高出12%-21%。归纳安全需求工程发展过程及其主要研究活动,给出安全需求工程的相关定义,并分析了几个典型的安全需求工程框架。通过总结安全需求工程领域的若干研究活动,提出安全需求工程研究的两大思路,并从6个方面介绍安全需求工程的研究进展,探讨安全需求工程研究存在的不足。作为总结,给出了安全需求工程领域最有前途的发展方向。Security requirements engineering（SRE） is gradually becoming one of the research focuses in software engineering in recent years.The return on investment will be 12%-21% higher when introducing the security analysis techniques and security engineering practice in early phase of the development cycle than in the phase of application designs.In this paper,the development processes and major research activities of SRE are summarised,relevant definitions of SRE are reviewed,and several classical SRE frameworks are analysed.Two ideas of SRE research are presented based on the summarisation of current SRE research activities,and the research advancements on SRE are introduced from six aspects subsequently.In addition,the shortcomings of SRE research are discussed as well.As the conclusion of the paper,some most promising directions of SRE development are pointed out.

关 键 词：安全需求 安全需求工程 安全需求获取 安全需求分析 安全需求建模 模型检测 风险评估 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]