An Approach: Constructing the Grammar from Security Pattern

Security requirement is one of essential requirements for the currently information system. Since, the system without security is risk to attack or fail. Consequently, stakeholders and developers must concern with security requirements. However, the security requirement is rather difficult to define correctly and completely because it requires experience and knowledge from stakeholders and developers with security background. In order to avoid the miss-configuration of system from requirements that gather from stakeholders. One of alternative solutions is security patterns which are guidance that include security requirements of a common security system. We propose an approach to construct a grammar in an extended-BNF form which helps to create security requirements of a system. A prototyping tool based on our proposed grammar is also presented.