A Survey on Formal Specification of Security Requirements

Abstract

Formalization of security requirements ensures the correctness of any safety-critical system, software system, and web applications through specification and verification. Although there is a gap between security requirements expressed in natural language and formal language. Formal language is a more powerful tool based on higher-order mathematics to express unambiguous and concise security requirements.it remains an active research challenge to express precise, concrete, and correct security requirements. Identification of security requirements is also a challenging task because requirement inherent in the software changes frequently. Specification through formal methods is possible only after fixing the security requirements. In this study, we propose a formal specification software process model (FSSPM). The proposed model indicates the use of formal specification at the early phase of software development is cost-effective, time saving, and reduces the possibility of error at the later phase of software development.