Abstract. Despite existing methodologies in the field, most requirements engineers are poorly trained to define security requirements. This is due to a considerable lack of security knowledge. Some security ontologies have been proposed, but a gap still exists between the two fields of security requirement engineering and ontologies. This paper is a survey, it proposes an analysis and a typology of existing security ontologies and their use for requirements definition.
In REF Souag et al. present an analysis of existing security ontologies and their use in defining requirements.
Ontologies for Security Requirements: A Literature Survey and Classification
CAiSE Workshops
Engineering Computer Science