COMPARATIVE LITERATURE ANALYSIS ON SECURITY REQUIREMENTS ENGINEERING

Security Requirements Engineering is one of the most important parts of the software development lifecycle that assist the software developer in developing a quality cost effective software application. Security requirements are the non-functional requirements which must be considered early in the software development lifecycle with functional requirements. However, elicitation of effective and efficient security requirements is not an easy task. There are several security requirements engineering techniques. This paper presents a comparative literature analysis of several existing security requirements engineering approaches for the development of secure software application. We discuss each existing security requirements engineering approach. We also comparatively analyze existing security requirements engineering approaches according to different criteria, such as the general approach and scope of the method, its validation, and quality assurance capabilities.