Abstract. Despite existing methodologies in the field, most requirements engineers are poorly trained to define security requirements. This is due to a considerable lack of security knowledge. Some security ontologies have been proposed, but a gap still exists between the two fields of security requirement engineering and ontologies. This paper is a survey, it proposes an analysis and a typology of existing security ontologies and their use for requirements definition.
REF present an analysis of existing security ontologies and their use in defining requirements.
Ontologies for Security Requirements: A Literature Survey and Classification
CAiSE Workshops
Engineering Computer Science