Security requirements engineering for specifying security requirements of an e-voting system as a legitimate solution to e-governance

Abstract

The changes in technology have put an increased pressure on e-governance to modernise its election process. In India, after several elections, we have noticed many problems such as long lines, sensitive polling booth and other polling problems. As a solution, we have moved to the electronic electoral process throughout the country, but a recent study revealed that various e-voting systems show serious failure due to specification, design and implementation flaws. In this paper, we propose to consider security requirements as functional requirements and security requirements engineering process in the early phases of e-voting system development as a legitimate solution for e-governance. As the result of adopting model-oriented security requirements engineering framework, the security requirements specification was complete and correct. High level of security was achieved by identifying more traces of vulnerabilities in turn identifying and specifying security requirements for e-voting system at the early phases of the software development life cycle.