@inbook {28407,
	title = {Modelling Security Requirements for Software Development with Common Criteria},
	booktitle = {Security, Privacy, and Anonymity in Computation, Communication, and Storage},
	volume = {11611},
	number = {1611-3349},
	year = {2019},
	month = {07/2019},
	pages = {XVI, 506},
	publisher = { Springer},
	organization = { Springer},
	edition = {1},
	abstract = {Designing software needs to address the issues of adaptation and evaluation in terms of object-oriented concepts to prevent the loss of resources in terms of system failure. System security assessments are common practice, and system certification according to a standard requires submitting relevant software security information to applicable authorities. Many security-related standards exist to develop various security-critical systems; however, Common Criteria (ISO/IEC 15408) is an International de-facto standard that assures specification, implementation, and evaluation of an IT security product. This research will aid in better communication and enhanced collaboration among different stakeholders, especially between software and security engineers, by proposing a model of security-related concepts in de-facto standard Unified Modeling Language (UML). In this paper, we present a Usage Scenario and a Conceptual Model by extracting key security-related images from Common Criteria. The effectiveness is illustrated by a case study on Facebook Meta-Model, built for the evaluation purpose of Common Criteria models.},
	keywords = {common criteria (ISO/IEC 15408), security evaluation, security requirement engineering, software modelling, UML profile},
	isbn = {978-3-030-24906-9},
	issn = {978-3-030-24907-6},
	url = {https://link.springer.com/chapter/10.1007\%2F978-3-030-24907-6_7},
	author = {Naseer, Amara and Huang, Zhiqiu and Ali, Awais},
	editor = {Wang, Guojun and Feng, Jun and Md Zakirul Al {Bhuiyan} and Lu, Rongxing}
}
