Security requirements engineering; State of the art and research challenges

In recent years software has faced a new challenge called security. The new idea in software security which has attracted the world's attention is to keep security in mind during development process. As requirements analysis plays an infrastructural role in this process, software security requirements would naturally be considered fundamental in secure software development. Stating peculiarities and deficiencies in security requirements engineering, this paper draws a picture from the current research situation by reviewing and classifying the efforts into four main categories; security requirements in the standard software development processes, security requirements engineering consist of eliciting and modeling security requirements, and threat modeling as a basis for security requirements engineering. Presenting challenges and open problems for each category, the paper will then set forth the research outlooks and future directions in security requirements.