University of Kashan Soft Computing Journal 2322-3707 10 2 2022 02 20 Review on security requirements in the software production process Review on security requirements in the software production process 72 83 112062 10.22052/scj.2022.242857.0 FA Haniyeh Ghorbani Moghadam Faculty of Technology and Engineering, Jahrom University, Jahrom, Iran Behnaz Jamasb Faculty of Computer Engineering and Information Technology, Shiraz University of Technology, Shiraz, Iran Hamed Dehdashti Jahromi Faculty of Technology and Engineering, Jahrom University, Jahrom, Iran Journal Article 2021 05 23 In recent years, the issue of increasing software security has led to extensive research in the software production process. One of the main aspects of secure system engineering is identifying security requirements to protect assets. The introduction of new security implementation methods in software systems is a result of cost, time, and efficiency features related to each method for identifying security requirements. These security methods are implemented to increase confidence in systems and protect organizational assets in software production cycles. Engineers must ensure that the produced software is secure against potential threats and attacks. Identifying, classifying, prioritizing, and measuring security requirements in terms of privacy, software structure, and other factors are part of software developers' concerns. In this paper, a selection of modern security requirements methods and their security factors are collected from 2017 to 2022 and compared based on the most frequent repetition of each method's factors. This paper introduces how modern methods work for developers and leads to selecting the most appropriate methods. Moreover, it helps people who are looking for recent research in the field of security requirements. In recent years, the issue of increasing software security has led to extensive research in the software production process. One of the main aspects of secure system engineering is identifying security requirements to protect assets. The introduction of new security implementation methods in software systems is a result of cost, time, and efficiency features related to each method for identifying security requirements. These security methods are implemented to increase confidence in systems and protect organizational assets in software production cycles. Engineers must ensure that the produced software is secure against potential threats and attacks. Identifying, classifying, prioritizing, and measuring security requirements in terms of privacy, software structure, and other factors are part of software developers' concerns. In this paper, a selection of modern security requirements methods and their security factors are collected from 2017 to 2022 and compared based on the most frequent repetition of each method's factors. This paper introduces how modern methods work for developers and leads to selecting the most appropriate methods. Moreover, it helps people who are looking for recent research in the field of security requirements. https://scj.kashanu.ac.ir/article_112062_feb43f59fa5d841e626e20497dd3f306.pdf