软件安全性需求提取方法研究综述

A Review of the Methods of Software Security Requirements Specification

安全性需求的提取是确保软件安全的关键。介绍了安全性需求的定义、目的以及种类,研究了当今主要的安全性需求提取方法,指出了未来安全性需求研究的重点和发展方向。

The specification of security requirements is central to software security. This paper describes the definition, the objective and the classification of security requirements, and the major methods and techniques of specifying security requirements currently used. It then analyzes the strengths as well as the weaknesses of these methods and their scope of application. In the end the future trend of the research on security requirements is put forward in this paper.