Model-based Security Engineering for Secure Systems Development

Security of software and systems is becoming more and more important in the context of the rapid rise of distributed communication systems and their use into the private life of each individual. The development of new software is also accompanied by an immense time and cost pressure. The aspects of IT-security are therefore often not considered within the software development process. The aim of this work is to contribute to the improvement of the integration of security engineering into software engineering. A model-based approach for determination of assets, security objectives, threats, and attacks is presented. The derivation of functional requirements for the software development process from these artefacts is explained.