Security Requirements for Web Services based on SIREN

Security in web services-based systems is a critical aspect since their operative infrastructure is based on Internet, which is a public medium and so intrinsically insecure. At present, there is an outstanding movement in industry towards the standardization of the security mechanisms to be used in web services-based systems. Given that the number of these security standards and mechanisms is high, the problem is that it is quite complex to know which mechanisms are the most suitable and therefore which standards should be used in practice. This task would be greatly simplified if developers would have a catalogue of security templates for web services that they could reuse. These templates could encompass the set of all possible security factors to be considered when designing systems based on this paradigm. Once the security requirements have been determined the step for identifying the mechanisms and standards to be used would be much more simple and straightforward. This paper presents a catalogue of security requirements template for web services based on the requirements engineering method called SIREN that try to fill the gap in the development life cycle of the web servicesbased systems.