<?xml version="1.0" encoding="UTF-8"?><xml><records><record><source-app name="Biblio" version="6.x">Drupal-Biblio</source-app><ref-type>5</ref-type><contributors><authors><author><style face="normal" font="default" size="100%">Massacci, Fabio</style></author><author><style face="normal" font="default" size="100%">Mylopoulos, John</style></author><author><style face="normal" font="default" size="100%">Federica Paci</style></author><author><style face="normal" font="default" size="100%">Tun, Thein Thun</style></author><author><style face="normal" font="default" size="100%">Yijun Yu</style></author></authors><secondary-authors><author><style face="normal" font="default" size="100%">Salinesi, Camille</style></author><author><style face="normal" font="default" size="100%">Pastor, Oscar</style></author><author><style face="normal" font="default" size="100%">Aalst, Wil</style></author><author><style face="normal" font="default" size="100%">Mylopoulos, John</style></author><author><style face="normal" font="default" size="100%">Rosemann, Michael</style></author><author><style face="normal" font="default" size="100%">Shaw, Michael J.</style></author><author><style face="normal" font="default" size="100%">Szyperski, Clemens</style></author></secondary-authors></contributors><titles><title><style face="normal" font="default" size="100%">An Extended Ontology for Security Requirements</style></title><secondary-title><style face="normal" font="default" size="100%">Advanced Information Systems Engineering Workshops</style></secondary-title><tertiary-title><style face="normal" font="default" size="100%">Lecture Notes in Business Information Processing</style></tertiary-title></titles><dates><year><style  face="normal" font="default" size="100%">2011</style></year></dates><urls><web-urls><url><style face="normal" font="default" size="100%">http://dx.doi.org/10.1007/978-3-642-22056-2_64</style></url></web-urls></urls><publisher><style face="normal" font="default" size="100%">Springer Berlin Heidelberg</style></publisher><volume><style face="normal" font="default" size="100%">83</style></volume><pages><style face="normal" font="default" size="100%">622-636</style></pages><isbn><style face="normal" font="default" size="100%">978-3-642-22056-2</style></isbn><abstract><style face="normal" font="default" size="100%">Security concerns for physical, software and virtual worlds have captured the attention of researchers and the general public, thanks to a series of dramatic events during the past decade. Unsurprisingly, this has resulted in increased research activity on topics that relate to security requirements. At the very core of this activity lies the problem of determining a suitable set of concepts (aka ontology) for modeling security requirements. Many proposals for such ontologies exist in the literature. The main objective of this paper is to amalgamate and extend the security ontologies proposed in [1] and [2]. The amalgamation includes a careful comparison of primitive concepts in Problem Frames and Secure Tropos, but also offers a novel account for rather nebulous security concepts, such as those of vulnerability and threat. The new concepts are justified and related to the literature. Moreover, the paper offers a number of security requirements adopted from industrial case studies, along with their respective representation in terms of the proposed ontology.</style></abstract><notes><style face="normal" font="default" size="100%">10.1007/978-3-642-22056-2_64</style></notes></record></records></xml>