When specifying a system, security and privacy needs to be addressed as early as possible. Unfortunately, many people find doing so difficult in the face of conflicting priorities. When these concerns are addressed, we discover how intrinsically difficult specifying security and privacy can be, and the blurred distinction between requirements and security and privacy concepts.<br>The Evolving Security and Privacy Requirements Engineering (ESPRE) Workshop will be a multi–disciplinary, one–day workshop that brings together practitioners and researchers interested in security and privacy requirements. ESPRE will probe the interfaces between Requirements Engineering and Security & Privacy, and take the first step in evolving security and privacy requirements engineering to meet a range of needs of stakeholders ranging from business analysts and security engineers, to technology entrepreneurs and privacy advocates.<br>* TOPICS<br>Topics addressed by ESPRE are those which will promote discussion about advancing Security & Privacy Requirements Engineering. These include, but are not excluded to:<br>– Adaptation of security and privacy requirements<br>– Consideration of legal compliance during security & privacy requirements engineering<br>– Evolution of security and privacy requirements<br>– Identification and management of all stakeholders (including attackers)<br>– Modelling multilateral stakeholder perspectives on security and privacy<br>– Modelling of domain knowledge for security and privacy requirements<br>– Modelling of trust and risk<br>– Ontologies for security and privacy requirements engineering<br>– Positive (and especially negative) lessons learned applying security and requirements engineering in practice<br>– Scalability of security requirements engineering approaches<br>– Security and privacy requirements engineering processes<br>– Security and privacy requirements elicitation and analysis<br>– Security requirements–based testing<br>– Teaching and training in security and privacy requirements engineering<br>– The role of security and privacy requirements engineering to support design innovation<br>– Use of requirements engineering to create security and privacy standard–compliant software<br>– Validation and verification of security and privacy requirements<br>
Abbrevation
ESPRE
Link
City
Beijing
Country
China
Deadline Paper
Start Date
End Date
Abstract