Security Requirements Classification into Functional and Non-functional

Abstract:

Essentially, a software system is identified by its functional and non-functional requirements. Functional requirements represent what the system should do, while non-functional requirements represent the characteristics of the system. The requirements, whether functional or non-functional, are the milestone and the basic foundation for every system. These requirements inevitably characterize the quality and size of the software. Among these requirements are the requirements of safety and protection. In this paper, we present recent research endeavors that investigate the classification techniques of security requirements. We devote a special concentration on security requirements definition as functional and non-functional as the first step in security requirements classification. Finally, we determine the research gap towards a future effort to use some classification factors towards classifying security requirements into functional and non-functional requirements.