Generalization/Specialization as a Structuring Mechanism for Misuse Cases

Use cases are becoming increasingly common in the early phases of requirements engineering, but they offer limited support for expressing security requirements. However, misuse cases can specify behavior not wanted in the system. This paper presents builds on previous work on misuse cases, here focusing on misuse case generalization as a feature for structuring a larger number of misuse cases in a specification.