{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T05:36:59Z","timestamp":1789450619627,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":23,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,5,14]],"date-time":"2016-05-14T00:00:00Z","timestamp":1463184000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,5,14]]},"DOI":"10.1145\/2884781.2884785","type":"proceedings-article","created":{"date-parts":[[2016,5,13]],"date-time":"2016-05-13T18:21:10Z","timestamp":1463163670000},"page":"866-876","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["Discovering \"unknown known\" security requirements"],"prefix":"10.1145","author":[{"given":"Awais","family":"Rashid","sequence":"first","affiliation":[{"name":"Security Lancaster Research Centre, Lancaster University, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Syed Asad Ali","family":"Naqvi","sequence":"additional","affiliation":[{"name":"Security Lancaster Research Centre, Lancaster University, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rajiv","family":"Ramdhany","sequence":"additional","affiliation":[{"name":"Security Lancaster Research Centre, Lancaster University, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Matthew","family":"Edwards","sequence":"additional","affiliation":[{"name":"Security Lancaster Research Centre, Lancaster University, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruzanna","family":"Chitchyan","sequence":"additional","affiliation":[{"name":"University of Leicester, UK"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"M. Ali","family":"Babar","sequence":"additional","affiliation":[{"name":"University of Adelaide, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,5,14]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"version 5.1","year":"2015","unstructured":"The critical security controls for effective cyber defense , version 5.1 . Council on Cyber Security, 2015 . The critical security controls for effective cyber defense, version 5.1. Council on Cyber Security, 2015."},{"key":"e_1_3_2_1_2_1","first-page":"73","volume-title":"Adaptive security management in saas applications","author":"Almorsy M.","year":"2014","unstructured":"M. Almorsy , A. Ibrahim , and J. Grundy . Adaptive security management in saas applications . In S. Nepal and M. Pathan, editors, Security, Privacy and Trust in Cloud Systems, pages 73 -- 102 . Springer Berlin Heidelberg , 2014 . M. Almorsy, A. Ibrahim, and J. Grundy. Adaptive security management in saas applications. In S. Nepal and M. Pathan, editors, Security, Privacy and Trust in Cloud Systems, pages 73--102. Springer Berlin Heidelberg, 2014."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-009-0090-z"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/EmpiRE.2011.6046253"},{"key":"e_1_3_2_1_5_1","volume-title":"The Discovery of Grounded Theory","author":"Glaser B. G.","year":"1967","unstructured":"B. G. Glaser and A. L. Strauss . The Discovery of Grounded Theory . Aldine Publishing Co. , New York NY , 1967 . B. G. Glaser and A. L. Strauss. The Discovery of Grounded Theory. Aldine Publishing Co., New York NY, 1967."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2012.171"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2757226.2764544"},{"key":"e_1_3_2_1_8_1","volume-title":"A Handbook of Incident and Accident Reporting","author":"Johnson C. W.","year":"2003","unstructured":"C. W. Johnson . A Handbook of Incident and Accident Reporting . Glasgow University Press , 2003 . C. W. Johnson. A Handbook of Incident and Accident Reporting. Glasgow University Press, 2003."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.2172\/5254810"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.5555\/942807.943895"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.24"},{"key":"e_1_3_2_1_12_1","volume-title":"Office of Nuclear Regulatory Commission, NUREG\/CR-5455, SI-92-101, Vol 2","author":"Paradies M.","year":"1993","unstructured":"M. Paradies , L. Unger , P. Haas , and M. Terranova . Development of the nrc's human performance investigation process (hpip). Division of Systems Research , Office of Nuclear Regulatory Commission, NUREG\/CR-5455, SI-92-101, Vol 2 , 1993 . M. Paradies, L. Unger, P. Haas, and M. Terranova. Development of the nrc's human performance investigation process (hpip). Division of Systems Research, Office of Nuclear Regulatory Commission, NUREG\/CR-5455, SI-92-101, Vol 2, 1993."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2009.54"},{"key":"e_1_3_2_1_14_1","volume-title":"Advances in Patient Safety: New Directions and Alternative Approaches","author":"Ruddick P.","unstructured":"P. Ruddick , K. Hannah , C. P. Schade , G. Bellamy , J. Brehm , and D. Lomely . Using root cause analysis to reduce falls in rural health care facilities . In Advances in Patient Safety: New Directions and Alternative Approaches , Vol. (2). 2008 . P. Ruddick, K. Hannah, C. P. Schade, G. Bellamy, J. Brehm, and D. Lomely. Using root cause analysis to reduce falls in rural health care facilities. In Advances in Patient Safety: New Directions and Alternative Approaches, Vol. (2). 2008."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2012.6345794"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2011.6051683"},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 15th USENIX Security Symposium","author":"Shah G.","year":"2006","unstructured":"G. Shah and A. Molina . Keyboards and covert channels . In Proceedings of the 15th USENIX Security Symposium , Vancouver, BC, Canada, July 31 - August 4, 2006 , 2006. G. Shah and A. Molina. Keyboards and covert channels. In Proceedings of the 15th USENIX Security Symposium, Vancouver, BC, Canada, July 31 - August 4, 2006, 2006."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-004-0194-4"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2014.6912262"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/998675.999421"},{"key":"e_1_3_2_1_21_1","volume-title":"Incident data analysis using data mining techniques. Master's thesis","author":"Veltman L. M.","year":"2008","unstructured":"L. M. Veltman . Incident data analysis using data mining techniques. Master's thesis , Texas A & M University , 2008 . L. M. Veltman. Incident data analysis using data mining techniques. Master's thesis, Texas A & M University, 2008."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1456362.1456366"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2566590.2566610"}],"event":{"name":"ICSE '16: 38th International Conference on Software Engineering","location":"Austin Texas","acronym":"ICSE '16","sponsor":["ACM Association for Computing Machinery","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE-CS\\TCSE TC on Software Engineering","IEEE-CS\\DATC IEEE Computer Society"]},"container-title":["Proceedings of the 38th International Conference on Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2884781.2884785","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2884781.2884785","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:54:09Z","timestamp":1750222449000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2884781.2884785"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,5,14]]},"references-count":23,"alternative-id":["10.1145\/2884781.2884785","10.1145\/2884781"],"URL":"https:\/\/doi.org\/10.1145\/2884781.2884785","relation":{},"subject":[],"published":{"date-parts":[[2016,5,14]]},"assertion":[{"value":"2016-05-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}