Identifying Security Requirements Body of Knowledge for the Security Systems Engineer

Suné von Solms; Annlizé Marnewick

doi:10.1007/978-3-030-23451-5_5

Identifying Security Requirements Body of Knowledge for the Security Systems Engineer

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Citations (Scopus)

Abstract

The interconnected nature of Industry 4.0–driven operations and systems is introducing the use of new digitized and connected industrial systems. These new connected environments impact system security, requirements engineers to include elicitation of security requirements as functional requirements. Academia and industry argue that systems engineers are not adequately prepared for the security- related activities required in the specification of secure systems. This paper utilizes a cybersecurity framework to create the body of knowledge related to Security Requirements Engineering for a module in systems engineering. The determined body of knowledge show Risk Management, Laws and Regulations, and Human Factors related to security must be considered in the changing technological landscape. Although not all systems engineers must have expert knowledge in this field, all systems engineers must have fundamental knowledge in security practice and the ability to apply systems thinking.

Original language	English
Title of host publication	Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings
Editors	Lynette Drevin, Marianthi Theocharidou
Publisher	Springer New York LLC
Pages	59-71
Number of pages	13
ISBN (Print)	9783030234508
DOIs	https://doi.org/10.1007/978-3-030-23451-5_5
Publication status	Published - 2019
Event	12th IFIP WG 11.8 World Conference on Information Security Education, WISE 2019 - Lisbon, Portugal Duration: 25 Jun 2019 → 27 Jun 2019

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	557
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	12th IFIP WG 11.8 World Conference on Information Security Education, WISE 2019
Country/Territory	Portugal
City	Lisbon
Period	25/06/19 → 27/06/19

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 9 Industry, Innovation, and Infrastructure

Keywords

Engineering education
Industry 4.0
Security
Security requirements engineering
Systems engineering

ASJC Scopus subject areas

Information Systems
Computer Networks and Communications
Information Systems and Management

Access to Document

10.1007/978-3-030-23451-5_5

Cite this

von Solms, S., & Marnewick, A. (2019). Identifying Security Requirements Body of Knowledge for the Security Systems Engineer. In L. Drevin, & M. Theocharidou (Eds.), Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings (pp. 59-71). (IFIP Advances in Information and Communication Technology; Vol. 557). Springer New York LLC. https://doi.org/10.1007/978-3-030-23451-5_5

von Solms, Suné ; Marnewick, Annlizé. / Identifying Security Requirements Body of Knowledge for the Security Systems Engineer. Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings. editor / Lynette Drevin ; Marianthi Theocharidou. Springer New York LLC, 2019. pp. 59-71 (IFIP Advances in Information and Communication Technology).

@inproceedings{bbbb846f22c145aa9abaf14ea7c56294,

title = "Identifying Security Requirements Body of Knowledge for the Security Systems Engineer",

abstract = "The interconnected nature of Industry 4.0–driven operations and systems is introducing the use of new digitized and connected industrial systems. These new connected environments impact system security, requirements engineers to include elicitation of security requirements as functional requirements. Academia and industry argue that systems engineers are not adequately prepared for the security- related activities required in the specification of secure systems. This paper utilizes a cybersecurity framework to create the body of knowledge related to Security Requirements Engineering for a module in systems engineering. The determined body of knowledge show Risk Management, Laws and Regulations, and Human Factors related to security must be considered in the changing technological landscape. Although not all systems engineers must have expert knowledge in this field, all systems engineers must have fundamental knowledge in security practice and the ability to apply systems thinking.",

keywords = "Engineering education, Industry 4.0, Security, Security requirements engineering, Systems engineering",

author = "\{von Solms\}, Sun{\'e} and Annliz{\'e} Marnewick",

note = "Publisher Copyright: {\textcopyright} 2019, IFIP International Federation for Information Processing.; 12th IFIP WG 11.8 World Conference on Information Security Education, WISE 2019 ; Conference date: 25-06-2019 Through 27-06-2019",

year = "2019",

doi = "10.1007/978-3-030-23451-5\_5",

language = "English",

isbn = "9783030234508",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "59--71",

editor = "Lynette Drevin and Marianthi Theocharidou",

booktitle = "Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings",

}

von Solms, S & Marnewick, A 2019, Identifying Security Requirements Body of Knowledge for the Security Systems Engineer. in L Drevin & M Theocharidou (eds), Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings. IFIP Advances in Information and Communication Technology, vol. 557, Springer New York LLC, pp. 59-71, 12th IFIP WG 11.8 World Conference on Information Security Education, WISE 2019, Lisbon, Portugal, 25/06/19. https://doi.org/10.1007/978-3-030-23451-5_5

Identifying Security Requirements Body of Knowledge for the Security Systems Engineer. / von Solms, Suné ; Marnewick, Annlizé.
Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings. ed. / Lynette Drevin; Marianthi Theocharidou. Springer New York LLC, 2019. p. 59-71 (IFIP Advances in Information and Communication Technology; Vol. 557).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Identifying Security Requirements Body of Knowledge for the Security Systems Engineer

AU - von Solms, Suné

AU - Marnewick, Annlizé

PY - 2019

Y1 - 2019

N2 - The interconnected nature of Industry 4.0–driven operations and systems is introducing the use of new digitized and connected industrial systems. These new connected environments impact system security, requirements engineers to include elicitation of security requirements as functional requirements. Academia and industry argue that systems engineers are not adequately prepared for the security- related activities required in the specification of secure systems. This paper utilizes a cybersecurity framework to create the body of knowledge related to Security Requirements Engineering for a module in systems engineering. The determined body of knowledge show Risk Management, Laws and Regulations, and Human Factors related to security must be considered in the changing technological landscape. Although not all systems engineers must have expert knowledge in this field, all systems engineers must have fundamental knowledge in security practice and the ability to apply systems thinking.

AB - The interconnected nature of Industry 4.0–driven operations and systems is introducing the use of new digitized and connected industrial systems. These new connected environments impact system security, requirements engineers to include elicitation of security requirements as functional requirements. Academia and industry argue that systems engineers are not adequately prepared for the security- related activities required in the specification of secure systems. This paper utilizes a cybersecurity framework to create the body of knowledge related to Security Requirements Engineering for a module in systems engineering. The determined body of knowledge show Risk Management, Laws and Regulations, and Human Factors related to security must be considered in the changing technological landscape. Although not all systems engineers must have expert knowledge in this field, all systems engineers must have fundamental knowledge in security practice and the ability to apply systems thinking.

KW - Engineering education

KW - Industry 4.0

KW - Security

KW - Security requirements engineering

KW - Systems engineering

UR - https://www.scopus.com/pages/publications/85068332083

U2 - 10.1007/978-3-030-23451-5_5

DO - 10.1007/978-3-030-23451-5_5

M3 - Conference contribution

AN - SCOPUS:85068332083

SN - 9783030234508

T3 - IFIP Advances in Information and Communication Technology

SP - 59

EP - 71

BT - Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings

A2 - Drevin, Lynette

A2 - Theocharidou, Marianthi

PB - Springer New York LLC

T2 - 12th IFIP WG 11.8 World Conference on Information Security Education, WISE 2019

Y2 - 25 June 2019 through 27 June 2019

ER -

von Solms S , Marnewick A. Identifying Security Requirements Body of Knowledge for the Security Systems Engineer. In Drevin L, Theocharidou M, editors, Information Security Education. Education in Proactive Information Security - 12th IFIP WG 11.8 World Conference WISE 12, Proceedings. Springer New York LLC. 2019. p. 59-71. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-030-23451-5_5

Identifying Security Requirements Body of Knowledge for the Security Systems Engineer

Abstract

Publication series

Conference

UN SDGs

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this