@inproceedings{66a6fe204be547f4ba204820b4dd3a3a,
title = "Towards a requirements-driven workbench for supporting software certification and accreditation",
abstract = "Security certification activities for software systems rely heavily on requirements mandated by regulatory documents and their compliance evidences to support accreditation decisions. Therefore, the design of a workbench to support these activities should be grounded in a thorough understanding of the characteristics of certification requirements and their relationships with certification activities. To this end, we utilize our findings from the case study of a certification process of The United States Department of Defense (DoD) to identify the design objectives of a requirements-driven workbench for supporting certification analysts. The primary contributions of this paper are: identifying key areas of automation and tool support for requirements-driven certification activities; an ontology-driven dynamic and flexible workbench architecture to address process variability; and a prototype implementation.",
author = "Lee, {Seok Won} and Gandhi, {Robin A.} and Siddharth Wagle",
year = "2007",
doi = "10.1109/SESS.2007.11",
language = "English (US)",
isbn = "0769529526",
series = "Proceedings - ICSE 2007 Workshops: Third International Workshop on Software Engineering for Secure Systems, SESS'07",
publisher = "IEEE Computer Society",
pages = "8--14",
booktitle = "Proceedings - ICSE 2007 Workshops",
note = "ICSE 2007 Workshops: Third International Workshop on Software Engineering for Secure Systems, SESS'07 ; Conference date: 20-05-2007 Through 26-05-2007",
}