604

The technical or organizational enforcement of security policies is a necessity for modern enterprises such as DATEV eG. However, security policy specification is challenging, especially for users inexperienced in security. The provision of project-and domain-specific security policy templates can support users in the specification of security policies. However, existing elicitation approaches focus on general security requirements or risk assessment and do not support domain-specific policy template derivation. In this paper, we present a methodology for eliciting and deriving such security policy templates. We use and adapt established techniques known from requirements engineering to elicit assets, threats, and countermeasures. The policy templates, derived from the gathered information, are used to instantiate domain-specific security requirements at run-time. We successfully applied our method in an industrial case study at DATEV eG to show its principle applicability.

Security and usability are highly important and interdependent quality attributes of modern IT systems. However, it is often hard to fully meet both in practice. Security measures are complex by nature and often complicate work flows. Vice versa, insecure systems are typically not usable in practice. To tackle this, we aim at finding the best balance between usability and security in software engineering and administration. Our methodology is based on active involvement of large user groups and analyzes user feedback in order to optimize security mechanisms with respect to their user experience, with a focus on security awareness. It is applied during requirements elicitation and prototyping, and to dynamically adapt unsuited security policies at runtime.