Home

Call For Papers

Important Dates

Committees

Accepted papers

Programme


SREIS 2001

SREIS 2002

SREIS 2005

Symposium on Requirements Engineering for Information Security (SREIS 2008)

Barcelona , Spain, March 4th-7th, 2008

Co-located with 3rd International Conference on Availability, Reliability and Security (ARES 2008).

WORKSHOP OVERVIEW

Security and privacy requirements for new eCommerce and Internet applications exceed the traditional requirements for network security and traditional software systems. Security and privacy requirements are more complex and increasingly critical. In most applications, informally stated and implicit security requirements are as urging as functional ones, but they are rarely analysed and designed carefully from the beginning and they are often added to a system as an after-though, exposing the system to higher costs while endangering overall design integrity. Moreover, there are strict regulations in place within many countries that impose rules for the collection, handling and processing of sensitive information such as personal data of individuals (e.g., 95/46/EC Data Protection Directive, US Privacy Act, HIPAA, etc.). Therefore, organizations that handle personal data cannot escape the obligation to implement these regulations in their IT infrastructure. Unfortunately, it has always been difficulty to bridge the gap between legal language and computer language, more importantly when legal obligations have to be converted into requirements to be enforced by the IT infrastructure. Moreover, coping with the intricacies of the software certification and accreditation process requested by some big IT contractors (as the US Dept. of Defense) demands for special requirement engineering techniques. The symposium on requirements engineering for information security invites papers on a diversity of topics, particularly ones that point out new directions. Theoretical, experimental, and experience papers are all welcome.