0

In terms of the requirement phase, what do we mean by "security specification"? Does it mean categorizing the security requirements under the security characteristics (such as authentication, authorization) and describing them in detail?

  • 1
    Can you post links to where you are getting these terms from. – Neil Smithline Oct 25 '15 at 17:35
1

Security Specification is a subtitle in a SRS(Software Requirements Specification) report.

Search "security" keyword in this sample SRS report to get better understanding:

http://www.cse.chalmers.se/~feldt/courses/reqeng/examples/srs_example_2010_group2.pdf

Example specification from that document:

ID: QR12

TAG: CommunicationSecurity

GIST: Security of the communication between the system and server.

SCALE: The messages should be encrypted for log-in communications, so others cannot get user-name and password from those messages.

METER: Attempts to get user-name and password through obtained messages on 1000 log-in session during testing.

MUST: 100% of the Communication Messages in the communication of a log-in session should be encrypted. Communication Messages: Defined: Every exchanged of information between client and server.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.