Classifying software security requirements into confidentiality, integrity, and availability using machine learning approaches.

ABSTRACT: Security requirements are considered one of the most important non-functional requirements of software. The CIA (confidentiality, integrity, and availability) triad forms the basis for the development of security systems. Each dimension is expressed as having many security requirements that should be designed, implemented, and tested. However, requirements are written in a natural language and may suffer from ambiguity and inconsistency, which makes it harder to distinguish between different security dimensions. Recognizing the security dimensions in a requirements document should facilitate tracing the requirements and ensuring that a dimension has been implemented in a software system. This process should be automated to reduce time and effort for software engineers. In this paper, we pr

SUBMITTER: Bagies T 

PROVIDER: S-EPMC11623117 | biostudies-literature | 2024

REPOSITORIES: biostudies-literature