Scenario Weaving for Security Requirements Elicitation

In this paper the authors propose security requirements elicitation method by scenario weaving. When the stakeholders write the behaviors of a system in scenarios or use cases, they may not have concern on software security. We prepare scenario fragments based on security evaluation criteria and weave them into the scenarios. Then we elicit the advices of weaving. The advices express the condition of requirements sentences such as when they needed. The authors explain the process of security requirements elicitation on proposed scenario language and show simple example with common criteria, most popular security evaluation criteria.