A new, evidence-based, theory for knowledge reuse in security risk analysis

• Published in: Empirical software engineering : an international journal Vol. 28; no. 4; p. 90
• Main Authors: Labunets, Katsiaryna, Massacci, Fabio, Paci, Federica, Tuma, Katja
• Format: Journal Article
• Language: English
• Published: New York Springer US 01.07.2023; Springer Nature B.V
• Subjects: Automation; Compilers; Computer Science; Design; Grounded theory; Interpreters; Knowledge; Performance evaluation; Programming Languages; Risk analysis; Risk assessment; Security; Software engineering; Software Engineering/Programming and Operating Systems; Subject specialists; Success factors; Threats; Knowledge reuse; Information security; Risk assessment; Empirical study

Security risk analysis (SRA) is a key activity in software engineering but requires heavy manual effort. Community knowledge in the form of security patterns or security catalogs can be used to support the identification of threats and security controls. However, no evidence-based theory exists abou...