Software Security Requirements Checklist

The increasing use of information systems led to dramatically improve the functionalitywith respect to safety, cost and reliability. However, with this growthof information systems the likelihood of vulnerabilities also increases. Securityproblems involving computers and software are frequent, widespread, and serious.The number and variety of attacks from outside organizations, particularlyvia the Internet, and the amount and consequences of insider attacks are increasingrapidly. We routinely hear customers claim that their system is insecure.However, without knowing what assumptions they make, it is hard to justifysuch a claim, and it is important to identify security requirements of the system.Enumerating the security to a system helps system architects develop realisticand meaningful secure software. In this paper, we propose a checklist for securityrequirements and assess the security with the help of a metrics based onchecklist threshold value.