Fuzzy logic driven security requirements engineering process. Issue 7 (3rd October 2021)

• Record Type: Journal Article
• Authors: Sadiq, Mohd; Susheela Devi, V.; Ahmad, Javed; Mohammad, Chaudhary Wali
• Is Part Of: Journal of information & optimization sciences. Volume 42:Issue 7(2021)
• Page Start: 1685
• Page End: 1707
• Publication Date: 2021-10-03
• Subjects: 68M25 -- 68N30 -- 03B52 -- 94D05; Security requirement -- Requirements elicitation -- Fuzzy logic -- and Triangular fuzzy numbers; Electronic data processing -- Periodicals; Information science -- Periodicals; Mathematical optimization -- Periodicals; 519.6
• DOI: 10.1080/02522667.2021.1972618
• Languages: English
• ISSNs: 0252-2667

Abstract

Abstract: Security requirements are non-functional requirements which are employed to protect the information from unauthorized users. After the requirements elicitation process, a system may have several requirements; and practically it is not possible to provide security for all the requirements because of the budget and other constraints of an organization. So, it is important to identify the selected set of software requirements. Selection of software requirements based on different criteria like cost and security is a multi-criteria decision making (MCDM) problem in which different stakeholders are involved and they specify their preferences on software requirements using linguistic variables. Based on our review, we found that existing methods like multilateral, problem frame, goal oriented, and common criteria do not support MCDM methods for the identification of those requirements which need more security during the development process. Therefore, to address this issue, in this paper, we present a fuzzy logic driven security requirements engineering process. Finally, the proposed methodology is explained with the help of an example.