Towards developing security requirements modeling for outsourcing software projects

Abstract

One of the most important aspects in achieving secure software systems in the software development process is security requirements engineering. It is crucial to take security concerns in the beginning of the development process. Outsourcing is a phrase used to describe the practice of seeking resources or subcontracting specific task to outside. Currently, project managers particularly in Malaysian Public Sector are facing challenges in security requirements. Project managers need a proper security modeling as a guideline to ensure the requirements meet. Hence, there is a need to study on security requirements modeling since it had become a crucial requirements since software is vulnerable to various attack. This paper proposes a study which focuses on the security requirement modeling in outsourcing software project in Malaysian Public Sector. We believe that security; privacy and trust requirements must be well collected, analyzed and specified through various stages of Requirements Engineering (RE) itself.