Research on security requirements engineering process

Nowadays, mostly security solutions are mainly focused on how to defend against various threats, including insider threats and outsider threats, instead of trying to solve security issues from their sources. In this paper, a security requirements engineering process is presented for security requirements elicitation and analysis. And the proposed process will deal with the security requirements at the earlier stages of system design in a systematic way. In addition, it can be generalized to any large-scale design project.