Ontology-based representation of reusable security requirements for developing secure web applications. (1st January 2013)

• Record Type: Journal Article
• Authors: Salini, P.; Kanmani, S.
• Is Part Of: International journal of internet technology and secured transactions. Volume 5:Number 1(2013)
• Page Start: 63
• Page End: 83
• Publication Date: 2013-01-01
• Subjects: security requirements -- requirements engineering -- web applications -- ontology -- knowledge -- vulnerabilities -- assets -- threats -- security attributes; Internet -- Security measures -- Periodicals; Computer security -- Periodicals; Information systems management -- Security measures -- Periodicals; Computer networks -- Security measures -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1748-569X

Abstract

Security is the major issue in web applications and it should be carefully considered in all the phases of the software development life cycle. The security requirements should be elicited and analysed in the early stages of requirements engineering. They are elicited from different sources by using security requirements engineering methods. Ontology can be used as one of the sources to specify security requirements knowledge effectively, since it is a 'formal, explicit specification of shared concepts' and is reusable. But there are no standard or only primitive security requirements ontology is available for requirements engineering phase. In this paper, we proposed and created security requirements ontology for web applications. Hence, we can reuse the security requirements knowledge and specify security requirements for developing different web applications. The reusability and effectiveness of security requirements ontology are validated using querying method.