A Case Study of Architecting Security Requirements in Practice: Initial Analysis

While security has long been a significant issue in military systems, the spread of the internet has stimulated a growing interest in, and increasing demand for, secure systems. Understanding how architects manage security requirements in practice is a necessary first step in providing repeatable processes using effective techniques, methods and architectural structures. We present the following initial results of multiple cases of practicing security architects: key aspects in security requirements, essential characteristics of security architects and critical issues in managing security requirements. We conclude with a discussion of related and future research.