Security Use Cases

Donald Firesmith
2003 Journal of Object Technology  
Although use cases are a popular modeling approach for engineering functional requirements, they are often misused when it comes to engineering security requirements because requirements engineers unnecessarily specify security architectural mechanisms instead of security requirements. After discussing the relationships between misuse cases, security use cases, and security mechanisms, this column provides examples and guidelines for properly specifying essential (i.e., requirements-level)
more » ... rements-level) security use cases. SECURITY USE CASES 54 J OURNAL OF OBJECT TECHNOLOGY V OL. 2, NO. 3
doi:10.5381/jot.2003.2.3.c6 fatcat:jbm3wy5kzrdzxhmksk23t3fvcq